
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@efox/emp-lib-base
Advanced tools
包含ME、多玩语音、寻你协议,部分功能对应app并未支持,将采用兼容处理
// example
type API_DATA<T> = {
code: number
data: T
message: string
}
const request = createGetter(`//unionvoice-act.joyyinc.com`)
const fightMonster = (data: {
sid: number
ssid?: number
zodiacId: number
}): Promise<
API_DATA<{
bizId: number
userId: number
userPropCnt: number
sid: number
ssid: number
zodiacId: number
zodiacStatus: 0 | 1 | 2 | 3
zodiacRealHp: number
resultMsg: string
awardName: string
}>
> => request(`/api/zodiac/attackZodiac`, data).catch(err => err)
type API_DATA<T> = {
code: number
data: T
message: string
}
const request = createGetter(`//unionvoice-act.joyyinc.com`)
const fightMonster = (data: {
sid: number
ssid?: number
zodiacId: number
}): Promise<
API_DATA<{
bizId: number
userId: number
userPropCnt: number
sid: number
ssid: number
zodiacId: number
zodiacStatus: 0 | 1 | 2 | 3
zodiacRealHp: number
resultMsg: string
awardName: string
}>
> => request(`/api/zodiac/attackZodiac`, data, {turnover:true}).catch(err => err)
const getChristmasRankConfig = langGetter('/ME1/christmasRank/zh-hans.json')
需要区分业务,目前只接入me
import {uploadOss} from 'src/helpers/fetch'
const onChange = async (e: any) => {
const file: File = e.target.files[0]
const {OssClient, OssData} = await uploadOss()
try {
const {url} = await OssClient.put(OssData.fileName, file)
} catch (e) {
console.error(e)
}
}
// template
<input type='file' onChange={onChange} />
// init
import {SvcAssemble} from '@emp-react-lib/base/helpers/service'
import {BIZ_ID} from '@emp-react-lib/base/helpers/browser'
const ClientApi = await getAppApi(BIZ_ID)
const appid = '12345'
const {uid} = await ClientApi.getUserInfo()
const {otp} = await ClientApi.getUserTicket()
await SvcAssemble.init({
appid,
uid: uid + '',
otp,
region: 'cn',
groupType: Number('xxxxx'),
groupId: (await ClientApi.getRoomId())[0],
})
// receiver data
import {useServiceData} from '@emp-react-lib/base/helpers/service'
import {PBDecode} from '@emp-react-lib/base/helpers/utils/pb'
// hook
useServiceData(
`12345_${fnName_SvcName}_${messageName}`,
async data => {
const decodeData = PBDecode({
clzName: 'ZodiacData',
root: await import('src/proto/zodiac_broadcast.proto'),
data,
})
},
self,
)
import {USER_HEAD, UNION_HEAD, UDB_APPID, SVC_GROUP_TYPE} from '@emp-react-lib/base/helpers/constant'
// 默认头像
USER_HEAD
// 工会头像
UNION_HEAD
// UDB APPID
UDB_APPID
// SVC_GROUP_TYPE
SVC_GROUP_TYPE
//
FAQs
## 目录
The npm package @efox/emp-lib-base receives a total of 0 weekly downloads. As such, @efox/emp-lib-base popularity was classified as not popular.
We found that @efox/emp-lib-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 17 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.