
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@openmrs/esm-devtools-app
Advanced tools
openmrs-esm-devtools is an in-browser javascript module that provides a UI for developers writing frontend code.
The devtools allow you to override any javascript module to point to any url. This is useful for developing features and for debugging problems, because you can tell the browser to load one module from your localhost while keeping all other modules using the default version in the import map.
The devtools are registered as a single-spa application that creates a gray or red rectangular button near the bottom right of the screen. The rectangular button will only show up if you run the following command in the browser console:
localStorage.setItem('openmrs:devtools', true)
Now refresh the page and you'll see the rectangle. Note that when the rectangle is red that it means that you have an active override.
openmrs-esm-devtools is using import-map-overrides to accomplish this behavior.
If you prefer using the browser console instead of a UI to manage module overrides, check out the documentation in that github project.
FAQs
Dev tools for frontend devs using OpenMRS
The npm package @openmrs/esm-devtools-app receives a total of 1,159 weekly downloads. As such, @openmrs/esm-devtools-app popularity was classified as popular.
We found that @openmrs/esm-devtools-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.