
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@morgan-stanley/fdc3-web-messaging-provider
Advanced tools
The FDC3 Messaging Provider plugin is a library used to facilitate low-level communications between HTML5 windows and iFrames used as a plugin to the main `@morgan-stanley/fdc3-web` library. It provides two types of messaging providers: the Root Window Me
The FDC3 Messaging Provider plugin is a library used to facilitate low-level communications between HTML5 windows and iFrames used as a plugin to the main @morgan-stanley/fdc3-web
library. It provides two types of messaging providers: the Root Window Messaging Provider and the iFrame Messaging Provider.
The Root Window Messaging Provider is designed to be used in the main application window. It allows for communication between the main window and any child windows or iFrames.
To use the Root Window Messaging Provider, follow these steps:
Import the messaging provider module and pass the rootWindowMessagingProviderFactory
to the DesktopAgentFactory.createRoot
function:
import { DesktopAgentFactory } from '@morgan-stanley/fdc3-web';
import { rootWindowMessagingProviderFactory } from '@morgan-stanley/fdc3-web-messaging-provider';
const desktopAgentFactory = new DesktopAgentFactory();
// If in the root window of the application create the Root Desktop Agent
const fdc3 = desktopAgentFactory.createRoot('my-application', rootWindowMessagingProviderFactory)
The iFrame Messaging Provider is designed to be used in windows that are children of the main application. It allows for communication between the iFrame and the main window.
To use the iFrame Messaging Provider, follow these steps:
Import the messaging provider module and pass the iframeMessagingProviderFactory
to the DesktopAgentFactory.createProxy
function:
import { DesktopAgentFactory } from '@morgan-stanley/fdc3-web';
import { iframeMessagingProviderFactory } from '@morgan-stanley/fdc3-web-messaging-provider';
const desktopAgentFactory = new DesktopAgentFactory();
// If in the child window or frame of the application create a Proxy Desktop Agent
const fdc3 = desktopAgentFactory.createProxy('my-child-application', iframeMessagingProviderFactory)
0.3.4 (2025-08-08)
When handshake messages are not responded to by applications after 3 attempts that application is removed from the app resolver. When an application is closed a WCP6Goodbye message is sent to the root agent and the application is removed from the app resolver.
FAQs
The FDC3 Messaging Provider plugin is a library used to facilitate low-level communications between HTML5 windows and iFrames used as a plugin to the main `@morgan-stanley/fdc3-web` library. It provides two types of messaging providers: the Root Window Me
The npm package @morgan-stanley/fdc3-web-messaging-provider receives a total of 17 weekly downloads. As such, @morgan-stanley/fdc3-web-messaging-provider popularity was classified as not popular.
We found that @morgan-stanley/fdc3-web-messaging-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.