
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@antonio-goncalves/hover-on-scroll
Advanced tools
HoverOnScroll is a JavaScript library that adds support to hover effects while scrolling the window or a container, it was developed to overcome the limitation of browsers to apply the css :hover
effect during scroll
The sample available on the dev folder could be run following those steps
npm install
npm run start
import HoverOnScroll from "@antonio-goncalves/hover-on-scroll";
const hoverOnScroll = new HoverOnScroll([elementToHover1,elementToHover2],options)
function destroy(){
hoverOnScroll.destroy()
}
First parameter of HoverOnScroll constructor
Name | Type | is Optional | Description |
---|---|---|---|
elementClass | string | no | Class of the element where the "hoverClass" must be applied when hovering |
hoverClass | string | no | Class which will be applied to the element to enable the hover effect |
Second parameter of HoverOnScroll constructor, this parameter is optional
Name | Type | is Optional | Description |
---|---|---|---|
mouseOffset | number | yes | Minimum Y value to be considered when listening the mouse position, this could be useful to allow the hover effect behind navbars |
initialMousePosition | {x:Number, y:Number} | yes | Initial mouse position |
scrollingElements | Element[] (DOM) | yes | Elements where the onScroll event will be attached, useful for containers with scroll |
touchBehaviour | TouchBehaviour | yes | Options specific for touch devices |
Those options are only relevant for touch devices.
Name | Type | is Optional | Description |
---|---|---|---|
scrollWhenTouch | boolean | yes | Set to true, to scroll to the element on touch |
offsetWhenScroll | Number | yes | vertical offset for the behaviour described on the previous option, is useful to place the content below a navbar |
FAQs

We found that @antonio-goncalves/hover-on-scroll demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.