
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@evrythng/context-script
Advanced tools
Used to be integrated via the GTM to any web page and perform a completed scan to capture consumer behaviour in our platform.
Go to the demo scan url to test the latest version of the context-script.
ACCESS TOKENS tab) and generate an AccessToken with WebApplication roleIn order to configure redirection with the context-script create a rule with the following mandatory settings:
Action type | is | scans - to prevent rule triggering during implicitScancontextScriptRedirection: true in constants - necessary check to prevent other rules from triggering redirections (which leads to infinite redirection loops)Example of the setup can be found in this project. Ask evt_engineering slack channel to invite you into ARNALDO'S MASTER ACCOUNT in production, if you dont have the access.
yarn install
yarn start
A browser tab with a rerun context-script button would be
Open browser dev tools in order to see console logs.
After making code changes and saving click rerun context-script button to rerun the script with latest changes.
Ask evt_engineering slack channel to invite you into Amplify Master Test Account in production, so that you could change redirection rules.
In order to deploy to QA:
alpha or betapre-release tag in GitHub with alpha or beta word in versionalpha/beta from the versionrelease tag in GitHubPlease, change only dev rules during development, test ones refers to the demo page.
Requires cookies to be allowed by user or GTM_ARE_COOKIES_BLOCKED variable to be set according to the current cookies consent.
Accepts following query parameters:
evt_token - required if GTM_EVT_TOKEN GTM variable is not specifiedevt_implicit_scan_id - optionalevt_product_id - required, 'scan not performed' message would be displayed in console if not specified (the case when user manually opens the web page rather than scanning QR code)evt_thng_id - optionalCreate custom html tag in GTM and specify the following (variables block can be removed, if not - according GTM variables needs to be defined):
<script>
var GTM_EVT_REGION = '{{EVRYTHNG API Region}}'; // optional, region is 'us' if not specified
var GTM_EVT_TOKEN = '{{EVRYTHNG API Token}}'; // optional, required if `evt_token` query param is not specified
var GTM_EVT_ARE_COOKIES_BLOCKED = '{{Cookies Are Blocked}}'; // optional, value is 'false' if not specified
</script>
<script>
var contextScript = document.createElement('script');
contextScript.setAttribute('src', 'https://cdn.jsdelivr.net/npm/@evrythng/context-script@1/dist/context-script.js?v=' + Date.now());
document.head.appendChild(contextScript);
</script>
Configuration example can be found in this GTM context-script container
FAQs
EVT context script
We found that @evrythng/context-script demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.