
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@dbmdz/mirador-imagecropper
Advanced tools
Adds an overlay to the canvas for retrieving the image url for the selected area.
Adds an overlay to the canvas for retrieving the image url for the selected area.
You can find production-ready build artifacts in the releases section.
Alternatively, you can use npm to install the artifacts:
$ npm install @dbmdz/mirador-imagecropper
If you have a Java Web-Application managed with mvn, there is also a WebJar, which can be included as follows:
<dependency>
<groupId>org.webjars.npm</groupId>
<artifactId>dbmdz__mirador-imagecropper</artifactId>
<version>{set to current version}</version>
</dependency>
<link rel="stylesheet" type="text/css" href="<url to the plugin>/imageCropper.min.css" />
...
<script src="<url to the plugin>/imageCropper.min.js"></script>
include the ShareButtons extension - the usage is explained in the corresponding README - if you want to have some share buttons displayed in the modal dialog
configure the behaviour of the plugin with the imageCropper configuration key:
var mirador = Mirador({
...
imageCropper: {
// Activate the cropping selection frame for every window in Mirador, default is false
activeOnStart: true,
// Define the number of decimals in the relative region coordinates, default is 5
roundingPrecision: 3,
// Show a license link defined in the containing manifest, default is false
showLicense: true,
// Display an info that the website containing the Mirador instance is left by clicking on the share buttons, default is false
showShareButtonsInfo: true
}
...
});
NOTE: The configuration key showShareButtonsInfo is only evaluated, if you have also included the ShareButtons extension.
![]()
FAQs
Adds an overlay to the canvas for retrieving the image url for the selected area.
We found that @dbmdz/mirador-imagecropper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.

Research
A malicious package uses a QR code as steganography in an innovative technique.

Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.