
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@brexhq/brex-js
Advanced tools
A JavaScript SDK for integrating Brex issuing card elements into web applications. This library provides secure, iframe-based components for displaying sensitive card information.
A JavaScript SDK for integrating Brex issuing card elements into web applications. This library provides secure, iframe-based components for displaying sensitive card information.
import Brex from '@brexhq/brex-js';
// Initialize Brex
const brex = Brex();
const elements = brex.elements();
// Create a card number display element
const cardNumber = elements.create('issuingCardNumberDisplay', {
issuingCard: 'your_issuing_card_id',
ephemeralKeySecret: 'your_ephemeral_key'
});
// Mount it to a container
cardNumber.mount('#card-number-container');
// Listen for events
cardNumber.on('complete', () => {
console.log('Card number is ready');
});
The library provides several elements for displaying card information:
issuingCardNumberDisplay
: Displays the card numberissuingCardCvcDisplay
: Displays the CVC/security codeissuingCardExpiryDisplay
: Displays the expiration dateissuingCardPinDisplay
: Displays the PINissuingCardCopyButton
: Creates a button to copy card detailsYou can customize the appearance of elements using supported style properties:
const element = elements.create('issuingCardNumberDisplay', {
issuingCard: 'your_issuing_card_id',
ephemeralKeySecret: 'your_ephemeral_key',
style: {
fontSize: '16px',
fontFamily: 'Arial, sans-serif',
color: '#333333',
fontWeight: 'normal',
letterSpacing: 'normal',
lineHeight: '1.5',
padding: '10px'
}
});
// Update styles later
element.update({
fontSize: '18px',
color: '#000000'
});
The copy button element allows users to copy card details:
const copyButton = elements.create('issuingCardCopyButton', {
issuingCard: 'your_issuing_card_id',
ephemeralKeySecret: 'your_ephemeral_key',
toCopy: 'number' // 'number', 'cvc', 'expiry', or 'pin'
});
copyButton.mount('#copy-button-container');
copyButton.on('copied', () => {
console.log('Card number copied');
});
All elements support the following events:
complete
: Fired when the element is fully loadedloading
: Fired when the element is loadingerror
: Fired when an error occurscopied
: Fired when content is copied (for copy buttons)element.on('complete', () => {
console.log('Element is ready');
});
element.on('error', () => {
console.log('Something went wrong');
});
Here's a complete example showing how to display all card information:
import Brex from '@brexhq/brex-js';
const brex = Brex();
const elements = brex.elements();
// Common configuration
const config = {
issuingCard: 'your_issuing_card_id',
ephemeralKeySecret: 'your_ephemeral_key',
style: {
fontSize: '16px',
fontFamily: 'Arial, sans-serif',
color: '#333333'
}
};
// Create elements
const cardNumber = elements.create('issuingCardNumberDisplay', config);
const cardCvc = elements.create('issuingCardCvcDisplay', config);
const cardExpiry = elements.create('issuingCardExpiryDisplay', config);
const cardPin = elements.create('issuingCardPinDisplay', config);
// Mount elements
cardNumber.mount('#card-number-container');
cardCvc.mount('#card-cvc-container');
cardExpiry.mount('#card-expiry-container');
cardPin.mount('#card-pin-container');
// Add copy buttons
const copyNumber = elements.create('issuingCardCopyButton', {
...config,
toCopy: 'number'
});
copyNumber.mount('#copy-number-button');
// Event handling
cardNumber.on('complete', () => console.log('Card number ready'));
copyNumber.on('copied', () => console.log('Card number copied'));
Required HTML:
<div id="card-number-container"></div>
<div id="copy-number-button">Copy</div>
<div id="card-cvc-container"></div>
<div id="card-expiry-container"></div>
<div id="card-pin-container"></div>
FAQs
A JavaScript SDK for integrating Brex issuing card elements into web applications. This library provides secure, iframe-based components for displaying sensitive card information.
The npm package @brexhq/brex-js receives a total of 118 weekly downloads. As such, @brexhq/brex-js popularity was classified as not popular.
We found that @brexhq/brex-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.