
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@dbmdz/mirador-sharebuttons
Advanced tools
Adds extra buttons for sharing things on different social media platforms.
Provides functions for adding additional buttons that allow sharing content across different social media platforms.
NOTE: This plugin is just a library, it does nothing by just including it.
You can find production-ready build artifacts in the releases section.
Alternatively, you can use npm
to install the artifacts:
$ npm install @dbmdz/mirador-sharebuttons
If you have a Java Web-Application managed with mvn
, there is also a WebJar, which can be included as follows:
<dependency>
<groupId>org.webjars.npm</groupId>
<artifactId>dbmdz__mirador-sharebuttons</artifactId>
<version>{set to current version}</version>
</dependency>
Enable the plugin by including the CSS and the JavaScript (after loading Mirador):
<link rel="stylesheet" type="text/css" href="<url to the plugin>/shareButtons.min.css" />
...
<script src="<url to the plugin>/shareButtons.min.js"></script>
Registers some needed Handlebars
helpers and sets a variable.
Parameters:
Name | Type | Description | Default |
---|---|---|---|
showExternalLinkInfo | Boolean | Display an info that the website containing the Mirador instance is left by clicking on the share buttons | false |
Injects the buttons to the target selector element in the given position.
Parameters:
Name | Type | Description | Default |
---|---|---|---|
targetSelector | String | The selector for the element that should contain the buttons | |
position | String | The position of the buttons within the containing element | "afterbegin" |
Updates the button links with the given parameters.
Parameters:
Name | Type | Description |
---|---|---|
data | Object | The data for the links |
data.attribution | String | The attribution of the link to share |
data.label | String | The label of the link to share |
data.link | String | The link itself |
data.thumbnailUrl | String | The thumbnail url of the link to share |
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.