
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@dvhb/badbrowser
Advanced tools
The library checks user client and shows a warning if the browser version does not meet minimal requirements
npm i @dvhb/badbrowser
http://dvhb.github.io/badbrowser/
import badbrowser from '@dvhb/badbrowser';
new badbrowser();
You can put html for custom alert windows in /alerts/
with this pattern:
alerts/
ru.html
en.html
...
You may take an example of html code for your custom alert from /dist/alerts/en.html
Desktop
Mobile
new badbrowser({
// Min version of browser that will be supported
supported: {
msedge: '12',
firefox: '37',
chrome: '41',
opera: '28',
safari: '8',
yandexbrowser: '15',
safari_mobile: '7',
android: '4',
chrome_mobile: '41',
msie_mobile: '11'
},
// path to your html alerts
// could be a function:
// function (ua) {
// return '/alerts/' + lang + '.html'
// }
path: '/alerts/en.html',
// if `false` then user's choice will be saved in the cookies
// and alert window will not be showen next time
ignoreChoice: false
})
Instead of specifying supported property you can specify unsupported browsers:
new badbrowser({
unsupported: {
// the same as supported.chrome = '40'
chrome: '39',
// the same as supported.firefox = '34'
firefox: '33',
// will show alert for any mobile browser
mobile: true
}
})
Also you can get the flag that indicates compatibility of a current browser
let bb = new badbrowser({
unsupported: {
// the same as supported.chrome = '40'
chrome: '39',
// the same as supported.firefox = '34'
firefox: '33',
// will show alert for any mobile browser
mobile: true
}
})
let isSupported = bb.check();
You can manually control warning window:
Shows warning if it is not added yet and removes warning if it exists.
bb.toggleWarning();
{
template: null,
path: false,
fullscreen: true,
ignoreChoice: false,
logo: false,
supported: {
chrome: '42',
chromium: '42',
firefox: '38',
msie: '9',
msedge: '12',
opera: '26',
safari: '6',
yandexbrowser: '15',
safari_mobile: '7',
android: '4',
mobile: true
}
}
chrome
firefox
msie
msedge
safari
yandexbrowser
android
ios
opera
samsungBrowser
phantom
blackberry
webos
silk
bada
tizen
seamonkey
sailfish
ucbrowser
qupzilla
vivaldi
sleipnir
kMeleon
FAQs
The library checks user client and shows a warning if the browser version does not meet minimal requirements
The npm package @dvhb/badbrowser receives a total of 4 weekly downloads. As such, @dvhb/badbrowser popularity was classified as not popular.
We found that @dvhb/badbrowser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.