Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@discourse/itsatrap
Advanced tools
Fork of the original Mousetrap, Simple library for handling keyboard shortcuts
ItsATrap is a simple library for handling keyboard shortcuts in Javascript.
It is licensed under the Apache 2.0 license.
It is around 2kb minified and gzipped and 4.5kb minified, has no external dependencies, and has been tested in the following browsers:
It has support for keypress
, keydown
, and keyup
events on specific keys, keyboard combinations, or key sequences.
Include itsatrap on your page before the closing </body>
tag
<script src="/path/to/itsatrap.min.js"></script>
or install itsatrap
from npm
and require it
var ItsATrap = require('itsatrap');
Add some keyboard events to listen for
<script>
// single keys
ItsATrap.bind('4', function() { console.log('4'); });
ItsATrap.bind("?", function() { console.log('show shortcuts!'); });
ItsATrap.bind('esc', function() { console.log('escape'); }, 'keyup');
// combinations
ItsATrap.bind('command+shift+k', function() { console.log('command shift k'); });
// map multiple combinations to the same callback
ItsATrap.bind(['command+k', 'ctrl+k'], function() {
console.log('command k or control k');
// return false to prevent default browser behavior
// and stop event from bubbling
return false;
});
// gmail style sequences
ItsATrap.bind('g i', function() { console.log('go to inbox'); });
ItsATrap.bind('* a', function() { console.log('select all'); });
// konami code!
ItsATrap.bind('up up down down left right left right b a enter', function() {
console.log('konami code');
});
</script>
There are a number of other similar libraries out there so what makes this one different?
keydown
events (You can specify keypress
, keydown
, or keyup
or let ItsATrap choose for you).?
or *
without having to specify shift+/
or shift+8
which are not consistent across all keyboardstrigger()
methodUnit tests are run with mocha.
View it online to check your browser compatibility. You may also download the repo and open tests/itsatrap.html
in your browser.
Install development dependencies
cd /path/to/repo
npm install
Run tests
npm test
Full documentation can be found at https://craig.is/killing/mice
FAQs
Fork of the original Mousetrap, Simple library for handling keyboard shortcuts
The npm package @discourse/itsatrap receives a total of 12,503 weekly downloads. As such, @discourse/itsatrap popularity was classified as popular.
We found that @discourse/itsatrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.