Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This extension for spree commerce aims to provide easy integration with the popular rails forum engine, Forem.
Initially, this means simply adding the fields to the Admin Spree::User form that are added to the User model during the Forem installation process "forem_state" and "forem_admin".
You MUST have a running spree store AND Forem installed in your spree project for this gem to work or be useful.
NOTE: when setting up Forem using rails g forem:install, you will be asked the name of your User class, make sure you enter: Spree::User
You can accept the rest of the default settings.
Once Spree and Forem are installed, add the following to your Gemfile:
gem 'spree_forem', :git => 'git://github.com/johndavid400/spree_forem.git'
then run bundle install:
bundle install
That should be it! Now you can go check the form for Users in the admin panel and you should see 2 additional form fields.
rails s
Navigate to:
localhost:3000/admin/users/
Try creating or editing a user and you should see two Forem fields.
Copyright (c) 2012 johndavid400, released under the New BSD License
FAQs
Unknown package
We found that spree_forem demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.