
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
@alvarium/document-signature
Advanced tools
This is a web component to display and sign documents.
To start a local version of the document-signature
component you need to execute the following commands:
npm install
npm start
This command should open a page in the browser with the url http://localhost:3000
This component can be deployed to any web page by adding the script and link tags to the HTML file, like so:
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>Document Signature</title>
<link rel="stylesheet" href="document-signature.css">
</head>
<body>
<document-signature
endpoint="https://documents.gw2.alvarium.io"
alvariumEndpoint="https://alvdev.gw2.alvarium.io"
token="<API_TOKEN>"
locale="es"
documentTypeId="<DOCUMENT_TYPE_ID>"
entity="documentSignature"
contractUserSignatureId="874a02aa-c7a1-4054-b2fc-f85d1dad94e8"
>
</document-signature>
<script type="module" src="document-signature.js"></script>
</body>
</html>
Then simply add the component wherever you want as so:
<document-signature></document-signature>
endpoint
(string): The endpoint of the document service.alvariumEndpoint
(string): The endpoint of the Alvarium service.token
(string): The token for the document service.locale
(string): The language in which the document should be displayed.documentTypeId
(string): The id of the document type to display and sign.entity
(string, optional): The entity that is signing the document.contractUserSignatureId
(string): The id of the contract user signature.This project is licensed under the MIT License.
FAQs
This is a web component to display and sign documents.
The npm package @alvarium/document-signature receives a total of 0 weekly downloads. As such, @alvarium/document-signature popularity was classified as not popular.
We found that @alvarium/document-signature demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.