
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Adds some additional git commands to add some smarts to your workflow. These commands follow a few guidelines:
All you need to do is grab the gem:
gem install git-smart
This will add an executable for each command, e.g. git-smart-pull
. You call them using git's simple syntax for custom commands, e.g. git smart-pull
. They'll be removed when you uninstall the gem.
You almost certainly want to run this as well, to allow git commands to be output with colour:
git config --global color.ui always
Git normally only colours output when being run from the terminal, not from within scripts like these. This sorts that right out.
There's only three commands at this point, but there'll be more!
Run git smart-pull
whenever you would have run git pull
. It doesn't take any arguments, it'll use the tracking branch configuration or assume 'origin/same-branch-name'.
In brief, it'll detect the best way to grab the changes from the server and update your local branch, using a git rebase -p
if there's no easier way. It'll also stash/pop local changes if need be.
Read what it does in detail: smart-pull
Recommended alias to use: gup
Run git smart-merge
when you would have run git merge
. This is basically a wrapper around git merge --no-ff
, which should have been the default anyway. It also does a stash/pop if required, and reports a bit of helpful output.
Details here: smart-merge
Recommended alias to use: gm
Big hat tip to @ben_h for this one - it's an alias to a completely badass git log format that not many people know about.
Details here: smart-log
Recommended alias to use: gl
Copyright (c) 2011 Glen Maddern and Envato Pty Ltd. See LICENSE.txt for further details.
FAQs
Unknown package
We found that git-smart-ng demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.