
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@azerion/add-to-homescreen
Advanced tools
This tool wil display a popup on the second day a use visits your site, it will suggest the user that he can add it to his homescreen note: this is a mobile feature.
Lets start by installing the package, like most of the other package we will make use of NPM
npm install @orange-games/add-to-homescreen --save-dev
Now lets call get the tool in our project.
import Homescreen from '@orange-games/add-to-homescreen';
At last let's call the feature!
new Homescreen('popup', {
storage_name: "homescreen",
title: "title",
stepChrome: "step 1 chrome",
stepSafari: "step 1 safari",
step2: "step 2"
});
note: all those parameters are REQUIRED
And done, it's that simple!
The styles are not included in this tool. Here are the style elements used. (SASS format)
popup {
/* Basic styling of the popup */
.title-container,
.text-container {
/* The container elements (basic styling like padding etc.) */
p {
/* This is for the icons of the respective browser */
&.chrome {
&:after {
/* Chrome icon */
}
}
&.safari {
&:after {
/* Safari icon*/
}
}
}
}
.title-container {
/* The title style (Things like background-color, font color etc.) */
/* It is recommended to use display: flex; for this */
h3 {
/* The actual text */
}
button {
/* This is the little close button. */
&:before {
/* Close icon */
}
}
}
.text-container {
/* Style for the steps (Things like background color etc.) */
p {
/* Style for the text + icon */
}
}
}
FAQs
Add to homescreen popup feature
We found that @azerion/add-to-homescreen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.