
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@evolv-delivery/emitter
Advanced tools
(Deprecated) Provides mechanism to generate events outside of an experiment
This package is being deprected and is no longer supported. Please use https://www.npmjs.com/package/@evolv-delivery/metrics for any event processing.
Adding an integration to the Evolv Manager
The top level key is pages
that contains an array of page matches that events may occur in. Each of these pages contains filters
and events
.
The filters
contains an array of conditionals. Each of these conditionals must be met on a page before the given events are monitor. The conditionals are based on the Evolv audience/context and will be reevaluated when those values are updated.
The events
contains an array containing all possible events that may occur on a given page. Each object in the array needs to contain tag
, activate
, and a optional monitor
.
The tag
is a string that rerpesents the event tag value that is sent to Evolv when the requirements within the activate are met.
The activate
contains an object specifying under what circumstances the event should occur. It contains the following two key value pairs:
page-load
events.The monitor
will be depricated in the future, but it currently requires the following json for non page-load
events:
"monitor": {
"type": "observer",
"selectors":[]
},
The following shows examples of each of the options available.
{"pages": [
{
"filters": [
{
"key": "web.url":
"value": "/products",
},
{
"key": "pageName",
"value": "gridwall"
}
]
"events": [
{
"tag": "gridwall.page-load",
"activate": {
"on": "pageload",
}
},
{
"tag": "gridwall-cta-all",
"activate": {
"on": "click",
"selector": "[class*='Tile'], [href*='bring-your-own-device']"
},
"monitor": {
"type": "observer",
"selectors":[]
}
}
]
}
]
}
FAQs
(Deprecated) Provides mechanism to generate events outside of an experiment
The npm package @evolv-delivery/emitter receives a total of 0 weekly downloads. As such, @evolv-delivery/emitter popularity was classified as not popular.
We found that @evolv-delivery/emitter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.