
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@limpopo113/editorjs-color-picker
Advanced tools
https://github.com/user-attachments/assets/c22b0e96-a0a2-4187-ba7a-0e8be3cfe9d1
https://github.com/user-attachments/assets/c22b0e96-a0a2-4187-ba7a-0e8be3cfe9d1
Get the package
yarn add editorjs-color-picker
Add a new Tool to the tools
property of the Editor.js initial config.
import ColorPicker from 'editorjs-color-picker';
const editor = new EditorJS({
...
tools: {
...
ColorPicker: {
class: ColorPicker,
},
}
...
});
If you don't want the text to retain its colors every time you copy and paste it into the editor, you can use the ColorPickerWithoutSanitize
class.
import { ColorPickerWithoutSanitize } from 'editorjs-color-picker';
const editor = new EditorJS({
...
tools: {
...
ColorPicker: {
class: ColorPickerWithoutSanitize,
},
}
...
});
The Paragraph Tool supports these configuration parameters:
Field | Type | Description |
---|---|---|
colors | string[] | (there are default colors) Array of colors you want |
columns | number | (default: 7 ) Number of columns to display |
If you copy and paste text with a different background color, it adopts the style of the <span>
.
The only solution I’ve found so far, without modifying the paragraph component and its onPaste handler, is to apply this style.
For now, I’m only attaching it here without adding it to the library, as it might interfere with other plugins.
So, anyone interested should try applying this style:
.ce-paragraph span {
background-color: unset !important;
}
If anyone finds a more elegant solution, can open a PR, and we’ll fix it.
FAQs
https://github.com/user-attachments/assets/c22b0e96-a0a2-4187-ba7a-0e8be3cfe9d1
The npm package @limpopo113/editorjs-color-picker receives a total of 1 weekly downloads. As such, @limpopo113/editorjs-color-picker popularity was classified as not popular.
We found that @limpopo113/editorjs-color-picker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.