
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@ewc-lib/ewc-select-enh
Advanced tools
A select component built with LitElement and TailwindCSS based on ECL styles.
A customizable select component built with LitElement and TailwindCSS.
To install the component, use NPM:
npm install @ewc-lib/ewc-select-enh
Import the component in your project and use it in your HTML:
import '@ewc-lib/ewc-select-enh';
See the main.js file in the site/src folder.
<ewc-select-enh
options='[
[{"code": "EU27_2020", "name": "European Union", "status": "active"}],
[
{"code": "AT", "name": "Austria", "status": "active"},
{"code": "BE", "name": "Belgium", "status": "active"},
...
],
[
{"code": "NO", "name": "Norway", "status": "active"},
{"code": "CH", "name": "Switzerland", "status": "active"},
...
]
]'
defaultOption='["EU27_2020"]'
invertColors="false"
></ewc-select-enh>
options
: JSON array of option groups. Each object should have a code
, name
, and status
.defaultOption
: Default selected option.activeOption
: Active selected option ?? Is it needed, as we don't have a RESET buttoninvertColors
: Use this when embedding the component on a dark background.The component dispatches custom events for interactions:
option-selected
: Fired when a country is selected.select.addEventListener("option-selected", (event) => {
console.log("Option selected:", event.detail.option);
});
Compile the TypeScript code to JavaScript and watch for changes.
npm run watch
cd site
npm run dev
Now, code changes are directly reflected in the browser.
Before publishing, test the package locally:
npm pack
to create a tarball.npm install ../path-to-your-package/@ewc-lib/ewc-select-enh-x.y.z.tgz
.This project is licensed under the EUPL License.
Contributions are welcome! Please open an issue or submit a pull request for any improvements or bug fixes.
FAQs
A select component built with LitElement and TailwindCSS based on ECL styles.
We found that @ewc-lib/ewc-select-enh demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.