#npmpackage — Public Fediverse posts

I just want to say FUCK YOU NPMJS.COM for making me having to create a new access token every 90 days maximum, and for offering a shitty 2FA without TOTP option

#npm #developer #webdeveloper #node #npmpackage #javascript #nodejs #node #OpenSource #FreeSoftware #js #typescrypt #web #programmer #npmjs

I just want to say FUCK YOU NPMJS.COM for making me having to create a new access token every 90 days maximum, and for offering a shitty 2FA without TOTP option

#npm #developer #webdeveloper #node #npmpackage #javascript #nodejs #node #OpenSource #FreeSoftware #js #typescrypt #web #programmer #npmjs

I just want to say FUCK YOU NPMJS.COM for making me having to create a new access token every 90 days maximum, and for offering a shitty 2FA without TOTP option

#npm #developer #webdeveloper #node #npmpackage #javascript #nodejs #node #OpenSource #FreeSoftware #js #typescrypt #web #programmer #npmjs

I just want to say FUCK YOU NPMJS.COM for making me having to create a new access token every 90 days maximum, and for offering a shitty 2FA without TOTP option

#npm #developer #webdeveloper #node #npmpackage #javascript #nodejs #node #OpenSource #FreeSoftware #js #typescrypt #web #programmer #npmjs

I just want to say FUCK YOU NPMJS.COM for making me having to create a new access token every 90 days maximum, and for offering a shitty 2FA without TOTP option

#npm #developer #webdeveloper #node #npmpackage #javascript #nodejs #node #OpenSource #FreeSoftware #js #typescrypt #web #programmer #npmjs

Claude Code Attack Persists Through Token Rotation Flaw

A surprising lack of resistance to a proof-of-concept attack has exposed a vulnerability in Claude Code, allowing a five-step attack chain that can turn routine token rotation into a continuous compromise. This exploit requires just one malicious npm package and the ability to run code on a developer's machine, making it a concerning threat.

https://osintsights.com/claude-code-attack-persists-through-token-rotation-flaw?utm_source=mastodon&utm_medium=social

#ClaudeCode #TokenRotationFlaw #SupplyChain #EmergingThreats #NpmPackage

Google Fixes Critical Gemini CLI Flaw Enabling Remote Code Execution

Google patched a critical flaw in Gemini CLI that allowed hackers to inject malicious code and take control of host systems, thanks to a report from Novee Security. The vulnerability, scoring a perfect 10.0 on the CVSS scale, has been fixed in recent updates to the @google/gemini-cli and google-github-actions/run-gemini-cli packages.

https://osintsights.com/google-fixes-critical-gemini-cli-flaw-enabling-remote-code-execution?utm_source=mastodon&utm_medium=social

#GeminiCli #RemoteCodeExecution #Google #NpmPackage #GithubActions

🎉 Breaking news: nerds discover the most overcompensating npm package version ever, because that's what really matters. 🤦‍♂️ Meanwhile, the rest of the world continues to revolve around slightly more important things, like, you know, everything else. 🌎✨
https://adamhl.dev/blog/largest-number-in-npm-package/ #nerdnews #npmpackage #overcompensation #techhumor #developerlife #HackerNews #ngated

🎉 Breaking news: nerds discover the most overcompensating npm package version ever, because that's what really matters. 🤦‍♂️ Meanwhile, the rest of the world continues to revolve around slightly more important things, like, you know, everything else. 🌎✨
https://adamhl.dev/blog/largest-number-in-npm-package/ #nerdnews #npmpackage #overcompensation #techhumor #developerlife #HackerNews #ngated

🎉 Breaking news: nerds discover the most overcompensating npm package version ever, because that's what really matters. 🤦‍♂️ Meanwhile, the rest of the world continues to revolve around slightly more important things, like, you know, everything else. 🌎✨
https://adamhl.dev/blog/largest-number-in-npm-package/ #nerdnews #npmpackage #overcompensation #techhumor #developerlife #HackerNews #ngated

🎉 Breaking news: nerds discover the most overcompensating npm package version ever, because that's what really matters. 🤦‍♂️ Meanwhile, the rest of the world continues to revolve around slightly more important things, like, you know, everything else. 🌎✨
https://adamhl.dev/blog/largest-number-in-npm-package/ #nerdnews #npmpackage #overcompensation #techhumor #developerlife #HackerNews #ngated

Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft https://gbhackers.com/npm-package/ #CyberSecurityNews #cybersecurity #npmPackage

Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft https://gbhackers.com/npm-package/ #CyberSecurityNews #cybersecurity #npmPackage

Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft https://gbhackers.com/npm-package/ #CyberSecurityNews #cybersecurity #npmPackage

Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft https://gbhackers.com/npm-package/ #CyberSecurityNews #cybersecurity #npmPackage

Developers Beware Of Malicious npm Package That Delivers Sophisticated RAT https://gbhackers.com/developers-beware-malicious-npm-package-rat/ #VulnerabilityAnalysis #RemoteAccessTrojan #cybersecurity #npmPackage #Malware

Developers Beware Of Malicious npm Package That Delivers Sophisticated RAT https://gbhackers.com/developers-beware-malicious-npm-package-rat/ #VulnerabilityAnalysis #RemoteAccessTrojan #cybersecurity #npmPackage #Malware

Developers Beware Of Malicious npm Package That Delivers Sophisticated RAT https://gbhackers.com/developers-beware-malicious-npm-package-rat/ #VulnerabilityAnalysis #RemoteAccessTrojan #cybersecurity #npmPackage #Malware

Developers Beware Of Malicious npm Package That Delivers Sophisticated RAT https://gbhackers.com/developers-beware-malicious-npm-package-rat/ #VulnerabilityAnalysis #RemoteAccessTrojan #cybersecurity #npmPackage #Malware

Sometimes, you have to interface with an API that doesn't respond fast enough. Moreover, you might perform the same request multiple times.

The solution?

Return the same promise for the same exact requests until they resolve. This is more useful when you interface with stateless APIs, where you just consume data.

https://github.com/chrispanag/memoized-node-fetch

#node #nodejs #npm #npmpackage #package #javascript #typescript #opensource

Sometimes, you have to interface with an API that doesn't respond fast enough. Moreover, you might perform the same request multiple times.

The solution?

Return the same promise for the same exact requests until they resolve. This is more useful when you interface with stateless APIs, where you just consume data.

https://github.com/chrispanag/memoized-node-fetch

#node #nodejs #npm #npmpackage #package #javascript #typescript #opensource

Weekends to #developers is time for hobby projects.
Worked half of my Sunday and fixed the issues.

v0.0.5 is published finally.

Changelogs:

- Fixed a major issue with exceptions.
- Better error handling with appropriate messages.
- New parameter factor introduced which helps in modifying the cropped area of face.
- More unit test cases added.
- Code Coverage enhanced to 99%.

#npm #npmPackage #nodejs #javascript #devops #cicd #automation #foss #opensource #opensourceContributions

Just released v0.0.4!

Changelogs:

- Function API has been modified to reduce complexity.
- Fixes in loading pre-trained classifier files.
- Added .npmignore file.
- Reduced package size to less than a MB.
- Added unit test cases for the new developments.
- Moved to Codecov from Sonarqube.
- Achieved 95% code coverage.
- README updates with images added.

#npm #npmPackage #nodejs #javascript #devops #cicd #automation #foss #opensource #opensourceContributions

Released v0.0.3!

Changelogs:

- Added support for multi-face detection.
- Redirecting to opencv4js npm package to obtain the updated opencv.js file easily.
- Integrated Sonarqube for code scanning and detect bugs/issues/smells in code.
- Integrated Jest for unit testing.
- Code coverage- 94.4%.
- README updates to provide more clarity.

v1.0.0 will be arriving by next week.

#npm #npmPackage #nodejs #javascript #devops #cicd #automation #foss #opensource #opensourceContributions

v0.0.2 is out now!

Changelogs:
- Minor code tweaks.
- Github Actions workflow added to automate publishing to npm registry.
- Documentation updated with relevant details on how to use the package.

#npm #npmPackage #javascript #GithubActions #devops #cicd #automation #foss #opensource #opensourceContributions

Was helping out a friend with some #NodeJs code, ended up creating a #npm package.

It uses #OpenCv to detect faces from an image and crops the faces out.

One of the use cases of this package can be creating thumbnails/previews showing just the faces from the original picture.

P.S. - The pre-release version is out now. More enhancements coming soon.

https://www.npmjs.com/package/opencv-facecrop

#npmPackage #javascript
#foss #opensource #opensourceContributions