
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
This plugin creates an environment variables on guest machine with paths to your Rubymine projects and its gems directory on host machine. Paths are read from Rubymine configuration.
Variables naming convention (e.g. for project named "sample"):
sample_path # path to your project
sample_gems_path # path to your project's gems
This is first version tested on Rubymine 7.0.4 and Vagrant 1.7.2. If you need support for other version you can submit an issue.
Execute:
$ vagrant plugin install vagrant-rubymine
After login on your guest machine you can use variables with your projects' paths, e.g:
$ echo $sample_path
$ echo $sample_gems_dir
You can use it to configure [charliesome/better_errors] (https://github.com/charliesome/better_errors):
# initializers/better_errors.rb
if defined? BetterErrors
# Opening files
BetterErrors.editor = proc do |full_path, line|
project_name = Rails.root.to_s.split('/').last.downcase
project_path = ENV["#{project_name}_path"]
gems_path = ENV["#{project_name}_gems_path"]
if project_path && full_path =~ /#{Rails.root.to_s}/
full_path = full_path.sub(Rails.root.to_s, project_path).sub('/', '\\')
elsif gems_path && full_path =~ /#{Gem.dir}/
full_path = full_path.sub("#{Gem.dir}/gems", gems_path).sub('/', '\\')
end
"runapp://rubymine?project_path=#{project_path}&line=#{line}&file_path=#{full_path}"
end
# Allowing host
host = ENV["SSH_CLIENT"] ? ENV["SSH_CLIENT"].match(/\A([^\s]*)/)[1] : nil
BetterErrors::Middleware.allow_ip! host if [:development, :test].member?(Rails.env.to_sym) && host
end
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that vagrant-rubymine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.