Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/mfreeborn/ag-grid-rs
Rust bindings for the AG Grid JavaScript table library.
ag-grid-rs aims to follow the API of AG Grid in an unsurprising way, and generally makes use of the builder pattern for constructing the Rust structures.
An example using the Yew
frontend framework is shown below.
use ag_grid_rs::{ColumnDef, DataSourceBuilder, GridOptions, RowModelType,
ToJsValue};
use gloo_net::http::Request;
use serde::Deserialize;
use wasm_bindgen::JsCast;
use web_sys::HtmlElement;
use yew::prelude::*;
#[function_component(About)]
pub fn about() -> Html {
// Fire the hook just once on initial load
use_effect_with_deps(
|_| {
// Get the element to which you want to attach the grid
let grid_div = get_element_by_id("grid-div");
// Define your columns
let field_names = vec!["athlete", "age", "country", "year"];
let cols = field_names
.iter()
.map(|name| ColumnDef::new(name).sortable(true))
.collect();
// Create your datasource, including a closure that will retunr rows from the
// server
let data_source = DataSourceBuilder::new(|params| async move {
// `params` contains information from AG Grid about which rows to get, how to
// sort the data, etc
let data_url = "https://www.ag-grid.com/example-assets/olympic-winners.json";
let rows = gloo_net::http::Request::get(data_url)
.send()
.await?
.json::<Vec<JsonData>>()
.await?;
Ok((rows, None))
})
.build();
let grid = GridOptions::<JsonData>::new()
.column_defs(cols)
.row_model_type(RowModelType::Infinite)
.datasource(data_source)
.build(grid_div);
// `grid` now provides a handle to the grid and column APIs
|| ()
},
(),
);
html! {
<>
<div id="grid-div" class="ag-theme-alpine" style="height: 500px"/>
</>
}
}
#[derive(ToJsValue, Deserialize)]
struct JsonData {
athlete: String,
age: Option<usize>,
country: String,
year: usize,
}
fn get_element_by_id(id: &str) -> HtmlElement {
web_sys::window()
.expect("unable to get window object")
.document()
.expect("unable to get document object")
.get_element_by_id(id)
.expect("unable to find grid-div")
.dyn_into::<HtmlElement>()
.unwrap()
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.