
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@e3c-summer-worker/homepage-ticker
Advanced tools
Ticker for the home page, writen in Elm and directed by Rev. Doo.
Ticker for the home page, writen in Elm and directed by Rev. Doo.
What it does is fetch the data from the deta micro server and display it in a simple HTML element.
It uses a Deta Micro server for the HTTP endpoint, which is a free cloud service built on AWS. The data is located in a Google Spreadsheet at this link. The code handling this logic resides in this repository.
On the Deta web view, the project is under sheets-api
. Note that the project is not homepage-ticker
, that was an old one that should be deleted, but Deta doesn't allow project deletions yet!
yarn
yarn start
This will watch the files in src/
and rebuild build/ticker.js
whenever they change.
Open a local dev server to host the html in the public/
folder to see the result. I use Five Server to do this. NOTE: make sure the url ends in public/index.html
, otherwise the server will not serve the files correctly.
yarn build
The live server can also be used to test that the compiled code is working.
The distributed files will be in the build/
folder (ticker.js
and ticker.css
).
V2 used webpack; it essentially contains the stuff in v1's <script>
tag, so you just need to import the files.
<link rel="stylesheet" type="text/css"
href="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@2/build/ticker.css">
<script
src="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@2/build/ticker.js"></script>
<script>
Latest version is 1.1.1. See the commit: https://github.com/e3c-summer-worker/custom-header/blob/1d8bfdd976f4aecd5c0d905d82b3d3a3184f3956/homepage-ticker-test.html.
Note that that commit used @latest
, but I soon realized I should have used @1
.
<link rel="stylesheet" type="text/css"
href="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@1/build/ticker.css">
<script
src="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@1/build/homepage-ticker-elm.js"></script>
<script>
window.addEventListener('load', () => {
console.log('query selector:', document.querySelector('.sqs-slide-layer.layer-front.full-width-height > .sqs-slide-layer-content'));
// somehow using `document.querySelector('.sqs-slice-group.group-copy.align-center-vert.full-width')` doesn't work
const parent = document.querySelector('.sqs-slide-layer.layer-front.full-width-height > .sqs-slide-layer-content');
const child = parent.children[1];
const elm = document.createElement('div');
elm.setAttribute('id', 'elm');
// insert after wrapper
// https://stackoverflow.com/a/4793630
parent.insertBefore(elm, child);
Elm.HomepageTicker.init({ node: elm });
})
</script>
FAQs
Ticker for the home page, writen in Elm and directed by Rev. Doo.
We found that @e3c-summer-worker/homepage-ticker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.