Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@kirillvakalov/ghost-cursor-playwright
Advanced tools
Move your mouse like a human in playwright or generate realistic movements on any 2D plane
Fork of https://github.com/reaz1995/ghost-cursor-playwright with playwright-core
in peerDependencies
.
Modification of actual ghost-cursor for puppeteer, with more functionality and rewrite to work well with playwright. Note! target elements rendered in the DOM will be scrolled vertically and horizontally to be visible in viewport
git clone https://github.com/reaz1995/ghost-cursor-playwright.git cursor
cd cursor
npm install
example of usage in src/example.ts to run example use
npm run example
for wsl2 don't forget to set up display
npm i ghost-cursor-playwright
import { createCursor } from 'ghost-cursor-playwright';
or;
const { createCursor } = require('ghost-cursor-playwright');
Create amd attach cursor to page
const cursor = await createCursor(page);
manipulate the cursor via:
//move actions before execute will keep performing random move (30% chance).
cursor.actions.move(target: string | BoundingBox | Vector, moveOptions?: moveOptions): Promise<void>;
type moveOptions = {
paddingPercentage?: number;
waitForSelector?: number;
waitBeforeMove?: [number, number];
};
cursor.actions.click(clickOptions?: clickOptions, moveOptions?: moveOptions): Promise<void>;
type clickOptions = {
target?: string | BoundingBox | Vector;
waitBeforeClick?: [number, number];
waitBetweenClick?: [number, number];
doubleClick?: boolean;
};
// if target is given then cursor will use move function before click
// if target is JS path string, then function will check if for sure is on correct target (sometimes rendered objects are covered in viewport by menu bar or dialogs etc.), if false will proceed fallback to native click
util functions
// actual position of cursor is mounted on window.mousePos, its value can be retrieve by
cursor.getActualPosOfMouse(): Promise<Vector>;
// actual target of cursor is mounted on window.mouseTarget, to compare target under cursor with given JS PATH selector use:
cursor.compareTargetOfMouse(selector: string): Promise<boolean>
// random Vector of element
cursor.getElemBoundingBox(selector: string): Promise<BoundingBox>
cursor.getRandomPointInsideElem(elemBoundingBox: BoundingBox, paddingPercentage?): Vector
// random Vector of viewport
cursor.getRandomPointOnViewport(paddingPercentage?): Promise<Vector>
FAQs
Move your mouse like a human in playwright or generate realistic movements on any 2D plane
We found that @kirillvakalov/ghost-cursor-playwright demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.