Today I Learned - Rocky Kev

Tagged “npm”

  1. TIL types of malicious npm attacks

    In the case of ionicons, the miscreants published 18 versions containing malicious form-stealing code; for example, icon-package (according to NPM download stats) has over 17,000 downloads. Other typo-squatting examples include umbrellaks instead of umbrellajs and so on.

  2. TIL malware in node_modules

    The very first line fetches the victim's country code using their IP address. If the victim is from Russia, Ukraine, Belarus, or Kazakhstan, then the malware exits early.

  3. TIL NPM Christmas

    This cute binary from NPM lets you really kick off the holidays.

  4. TIL Npx npm-check-updates

    Updating packages is frequent chore to do so you are always running the latest security patches.

  5. TIL npx

    This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

  6. TIL how to get a list of all globally installed npm commands

    Well, you probably installed it globally. I was curious on what other global commands I installed. 'npm list -g --depth 0'

  7. TIL the -s in npm install means silent install

    In other words, including -s (or --silent) in your npm install command means that it will have no output (only a newline)

  8. TIL what to do if you're a Win User getting NODE_ENV errors

    Setting NODE_ENV=production before command babel doesn't work on Windows.

  9. TIL how to run npm that's inside a child folder

    Running npm scripts on other package.json files inside child folders

  10. TIL NPM Audit Fix

    Update your security packs

  11. TIL Rando.js

    Node Version Manager might be the reason everything's broken in your life.

  12. TIL Github workflows

    Deploy your Github master files to FTP

  13. TIL Node Version Manager

    Node Version Manager might be the reason everything's broken in your life.

  14. TIL Adding a repo as a dependency in package.js

    If they aren't published as a NPM, you can still do this

See all tags.