Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@odnoklassniki/ok-apps-sdk
Advanced tools
import OKSDK from '@odnoklassniki/ok-apps-sdk';
// Init SDK
await OKSDK.init();
For use in a browser, include the file dist/browser.min.js
and use as follows
<script src="https://unpkg.com/@odnoklassniki/ok-apps-sdk/dist/browser.min.js"></script>
<script>
// Init SDK
OKSDK.init()
.then(mode => {...})
.catch(error => {...});
</script>
OKSDK.Methods
Contains groups of methods that avalable and recommended for use
Some of them return promise with response
Response fields
status
Text with status ok | errordata
Data of response string | boolean | number | objectExample
const {status, data: appId} = await OKSDK.Methods.Utils.getAppId();
Some of them return value synchronously
Example
const isSupported = OKSDK.Methods.Utils.isSupported(); // boolean
Some of them need callback to be provided
Callback arguments
status
Text with status ok | errordata
Data of response string | boolean | number | objectExample
const callback = (status, data) => {
console.log(data);
};
OKSDK.Methods.Utils.observeServiceCallbacks('DEVICE_ORIENTATION', callback);
OKSDK.invoke
OKSDK.invokeUIMethod
@DepricatedThis methods allow you to call methods as it was done in previous versions of SDK
Parameters
method
required Method nameparams
optional Array of parameterscallback
optional Callback for getting resultExample
// Sending event to client
OKSDK.invoke('joinGroup', [groupId], ({status, data}) => {});
OKSDK.Client.call
Call API methods
Parameters
params
required Object with call params including method namecallback
optional A function that will be called after the server respondsresig
optional Required when it is necessary to request user confirmation for any action through a separate preview. In all other cases, call the function with only 2 parameters.Method can be used with callback or with promise
Example
// Sending event to client
const params = {
"method":"friends.get"
};
const callback = (status, data, error) => {
if (error) {
processError(error);
} else {
processFriendIds(data);
}
};
OKSDK.Client.call(params, callback);
OR
// Sending event to client
const params = {
"method":"friends.get"
};
const data = await OKSDK.Client.call(params);
FAQs
Connects an Application with OK client
We found that @odnoklassniki/ok-apps-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.