Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Author: Ian Lee lee1001@llnl.gov and Elsa Gonsiorowski gonsie@llnl.gov
This gem can be used in two ways: either as a gem-based theme or through GitHub pages remote theme support (details here).
Add this line to your Jekyll site's Gemfile
:
gem "jekyll-llnl-theme"
And add this line to your Jekyll site's _config.yml
:
theme: jekyll-llnl-theme
And then execute:
$ bundle
Or install it yourself as:
$ gem install jekyll-llnl-theme
This is a recent addition to GitHub pages and is simple to use.
Add this line to your site's Gemfile
:
gem "github-pages", group :jekyll_plugins
And add this line to your site's _config.yml
:
remote_theme: LLNL/Jekyll-LLNL-Theme
It is unclear if the remote theme is suitable for local development, but it will work on deployed sites.
This theme supports multiple page websites.
Any page which is located at /
, such as /about.md
, will be added to the navigation bar at the top.
Each page should include the following YAML front matter:
---
layout: default
title: Title of the Page
---
Currently, there is only the default
layout.
In true Jekyll fashion, a blog can be created by adding a _posts/
directory.
See the Jekyll Documentation for details on formatting blog entries.
The following code is an example of how to create a list of blog entries:
<ul>
{% for post in site.posts %}
<li>
<a href="{{ post.url }}">{{ post.title }}</a>
</li>
{% endfor %}
</ul>
Assuming working on OS X, tested on OS X 10.11.2. gem
(Ruby package manager)
was preinstalled, so just working from there:
# Install the dependencies:
$ gem install jekyll
# Build and serve the website
$ jekyll serve --baseurl=''
# Browse to (by default) `localhost:4000` in a web browser
$ open localhost:4000
For more information, check out the full documentation at: http://jekyllrb.com/
Using Bundler:
# Install the dependencies
$ bundle Install
# Build and serve the website
$ bundle exec jekyll serve --baseurl=''
# Browse to (by default) `localhost:4000` in a web browser
$ open localhost:4000
Bug reports and pull requests are welcome on GitHub at https://github.com/llnl/jekyll-llnl-theme. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the LLNL Contributing Guide code of conduct.
This Jekyll theme is released under the MIT License. For more details see the LICENSE File.
LLNL-CODE-705597 LLNL-WEB-680594
FAQs
Unknown package
We found that opensource-theme demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.