
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@adiynil/tourjs
Advanced tools
🎯 一个轻量级的页面引导库,帮助用户快速了解网页功能。
npm install @adiynil/tourjs
import { Tour } from '@adiynil/tourjs';
// 创建引导实例
const tour = new Tour({
steps: [
{
target: '#step1',
content: '这是第一步引导'
},
{
target: '.step2',
content: '这是第二步引导',
placement: 'right'
}
],
config: {
autoStart: true,
zIndex: 'auto'
}
});
// 开始引导
tour.run();
interface TourConfig {
// 是否自动跳过未找到的元素
autoSkipInvalid: boolean;
// 是否自动开始执行
autoStart: boolean;
// 基础层级,可以是具体数值或 'auto'
zIndex: number | 'auto';
// 滚动配置
scroll?: {
offset?: number;
duration?: number;
};
// tooltip 配置
tooltip?: {
minWidth?: number;
maxWidth?: number;
defaultPlacement?: 'top' | 'right' | 'bottom' | 'left';
defaultOffset?: number;
};
// 动画配置
animation?: {
duration?: number;
easing?: string;
};
}
interface TourStep {
// 目标元素的选择器
target: string;
// 提示内容
content: string;
// 自定义样式
style?: Partial<CSSStyleDeclaration>;
// 定位配置
placement?: 'top' | 'right' | 'bottom' | 'left';
// 偏移量配置
offset?: {
mainAxis?: number;
crossAxis?: number;
};
}
next()
: 进入下一步previous()
: 返回上一步skip()
: 跳过引导cleanup()
: 清理引导goTo(index)
: 跳转到指定步骤getCurrentStep()
: 获取当前步骤索引getTotalSteps()
: 获取总步骤数isFirst()
: 是否是第一步isLast()
: 是否是最后一步run()
: 开始执行引导Tour.configure(options)
: 配置全局设置FAQs
The npm package @adiynil/tourjs receives a total of 2 weekly downloads. As such, @adiynil/tourjs popularity was classified as not popular.
We found that @adiynil/tourjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.