
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@casual-simulation/aux-vm-browser
Advanced tools
A set of utilities required to securely run an AUX in a web browser.
A set of utilities required to run an AUX in a web browser.
npm install @casual-simulation/aux-vm-browser
WorkerEntry.js
file to your Webpack config:entry: {
vm: path.resolve(
__dirname,
'node_modules',
'@casual-simulation',
'aux-vm-browser',
'html',
'WorkerEntry.js'
),
},
iframe_host.html
file to your webpack config via the HtmlWebpackPlugin
:new HtmlWebpackPlugin({
chunks: ['vm'],
template: path.resolve(
__dirname,
'node_modules',
'@casual-simulation',
'aux-vm-browser',
'html',
'iframe_host.html'
),
title: 'AUX VM',
filename: 'aux-vm-iframe.html',
}),
aux-vm-iframe.html
is available at the root path of the site.import { BotManager } from '@casual-simulation/aux-vm-browser';
import { AuxUser } from '@casual-simulation/aux-vm';
start();
async function start() {
// The user that we want the program to act as.
// In a real-world scenario we would not hardcode these values
// and we would store the token in a secure location.
const user: AuxUser = {
id: 'myUserId', // The Unique ID of this user session.
username: 'myUsername', // The unique username of the user.
name: 'myName', // The common name of the user.
token: 'mySecretToken', // The user password.
isGuest: false, // Whether the user should be treated as a guest.
};
// The ID of the channel that should be loaded.
// The ID can have the following forms:
// - 'channelId' - This will load 'channelId' from the current host (taken from navigator).
// - 'https://example.com/*/channelId' - This will load 'channelId' from example.com over https
const id = 'channelId';
// Create a file manager.
// This represents an in-browser AUX simulation.
const sim = new BotManager(user, id, {
isBuilder: false,
isPlayer: false,
});
// Initialize the simulation.
// This will setup a web worker and pipe
// events between the worker and main thread.
await sim.init();
// Listen for the sync state to change to "synced".
// When we're synced we know we have the most up to date data
// and we can communicate our changes to the server.
// Note that this will not fire if we are not allowed to connect.
// This may happen if we are not authenticated/authorized.
sim.connection.syncStateChanged.subscribe((synced) => {
if (synced) {
console.log("We're synced!");
// TODO: Update THE UI
} else {
console.log('No longer synced.');
// TODO: Update the UI
}
});
}
V2.0.36
Ctrl+Shift+F
while the systemPortal is open or by selecting the eyeglass icon on the left side of the screen.portalBackgroundAddress
to casualos://camera-feed
.casualos://camera-feed/rear
and casualos://camera-feed/front
.// in @onSetupApp
const parent = that.document.createElement('div');
const child = that.document.createElement('span');
parent.appendChild(child);
parent.appendChild(child); // This would cause the issue
os.compileApp()
.
os.compileApp()
uses a change detection algorithm to limit the number of HTML elements it needs to create.FAQs
A set of utilities required to securely run an AUX in a web browser.
The npm package @casual-simulation/aux-vm-browser receives a total of 6 weekly downloads. As such, @casual-simulation/aux-vm-browser popularity was classified as not popular.
We found that @casual-simulation/aux-vm-browser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.