
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@kirillvakalov/ghost-cursor-playwright
Advanced tools
Move your mouse like a human in playwright or generate realistic movements on any 2D plane
Fork of https://github.com/reaz1995/ghost-cursor-playwright with playwright-core in peerDependencies.
Modification of actual ghost-cursor for puppeteer, with more functionality and rewrite to work well with playwright. Note! target elements rendered in the DOM will be scrolled vertically and horizontally to be visible in viewport
git clone https://github.com/reaz1995/ghost-cursor-playwright.git cursor
cd cursor
npm install
example of usage in src/example.ts to run example use
npm run example
for wsl2 don't forget to set up display
npm i ghost-cursor-playwright
import { createCursor } from 'ghost-cursor-playwright';
or;
const { createCursor } = require('ghost-cursor-playwright');
Create amd attach cursor to page
const cursor = await createCursor(page);
manipulate the cursor via:
//move actions before execute will keep performing random move (30% chance).
cursor.actions.move(target: string | BoundingBox | Vector, moveOptions?: moveOptions): Promise<void>;
type moveOptions = {
paddingPercentage?: number;
waitForSelector?: number;
waitBeforeMove?: [number, number];
};
cursor.actions.click(clickOptions?: clickOptions, moveOptions?: moveOptions): Promise<void>;
type clickOptions = {
target?: string | BoundingBox | Vector;
waitBeforeClick?: [number, number];
waitBetweenClick?: [number, number];
doubleClick?: boolean;
};
// if target is given then cursor will use move function before click
// if target is JS path string, then function will check if for sure is on correct target (sometimes rendered objects are covered in viewport by menu bar or dialogs etc.), if false will proceed fallback to native click
util functions
// actual position of cursor is mounted on window.mousePos, its value can be retrieve by
cursor.getActualPosOfMouse(): Promise<Vector>;
// actual target of cursor is mounted on window.mouseTarget, to compare target under cursor with given JS PATH selector use:
cursor.compareTargetOfMouse(selector: string): Promise<boolean>
// random Vector of element
cursor.getElemBoundingBox(selector: string): Promise<BoundingBox>
cursor.getRandomPointInsideElem(elemBoundingBox: BoundingBox, paddingPercentage?): Vector
// random Vector of viewport
cursor.getRandomPointOnViewport(paddingPercentage?): Promise<Vector>
FAQs
Move your mouse like a human in playwright or generate realistic movements on any 2D plane
The npm package @kirillvakalov/ghost-cursor-playwright receives a total of 6 weekly downloads. As such, @kirillvakalov/ghost-cursor-playwright popularity was classified as not popular.
We found that @kirillvakalov/ghost-cursor-playwright demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.