Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
The nanoc-toolbox is a collection of filters and helpers for the static site generator tool nanoc. I have created this gem for my personal need on my blog/resume website. If you feel something's missing, feel free to contribute.
To use the nanoc-toolbox, you have to start by installing the gem.
gem install nanoc-toolbox
Then require the project main file in your default.rb file in the lib directory of your nanoc project.
require "nanoc/toolbox"
And the last step is to include the required helper or filter, anywhere in the lib directory of your lib directory. The usage wants you to put it in the default.rb or the helpers.rb file.
The following example shows a sample helpers_.rb
file in the lib directory
# Default Helpers provided By Nanoc
include Nanoc3::Helpers::Blogging
include Nanoc3::Helpers::Breadcrumbs
# Custom Helpers
include Nanoc::Toolbox::Helpers::Navigation
include Nanoc::Toolbox::Helpers::Gravatar
The API documentation could be found on RubyDoc.info
Some usage guides could be found on the GitHub wiki
All the people in this list
See the CHANGELOG file for details.
Copyright (c) 2011 Anouar ADLANI, nanoc-toolbox is released under the MIT license. See the LICENSE file for details.
FAQs
Unknown package
We found that nanoc-toolbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.