
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@parcellab/cm-utils
Advanced tools
Campaign manager utilities for your e-commerce shop/app.
<pl-cm-banner>
web componentRenders parcelLab campaign manager content in any website/shop/app.
For identifying what campaign to render you can pass either a parcelLab tracking-id or the component will try to identify the current tracking via the browsers URL search query in the manner of the parcelLab's order status page/track and trace plugin.
(e.g. /order-tracking.html?tno=1234567&courier=dhl-germany
)
For using the pl-cm-banner component, just import the es module somewhere in your website - and place the <pl-cm-banner>
in your HTML, wherever you want to display the campaign manager banner:
As static JS bundle from the parcelLab CDN:
<!-- ... -->
<script src="https://cdn.parcellab.com/js/cm-utils/bundle.js"></script>
</head>
<body>
<div class="col">
<pl-cm-banner></pl-cm-banner>
<div/>
<!-- ... -->
Or as ESM Javascript Module, directly from unpkg package manager:
<!-- ... -->
<script type="module" src="https://unpkg.com/@parcellab/cm-utils"></script>
</head>
<body>
<div class="col">
<pl-cm-banner></pl-cm-banner>
<div/>
<!-- ... -->
First install the @parcellab/cm-banner package:
npm i @parcellab/cm-utils
Import the component and use it just like a normal DOM element:
// ...
import "@parcellab/cm-utils";
// ...
function Banner() {
const horizontalBannerType = "bannerHorizontal";
return (
<div className="col">
<pl-cm-banner bannerType={horizontalBannerType}></pl-cm-banner>
</div>
);
}
💡 In HTML Components kebab-case-props will be transfered to camelCaseProps automatically. In React you can use camelCase.
@Prop() trackingId: string;
// not requirerd
// eg.:
<pl-cm-banner tracking-id="xyz">
Sets the tracking id for which the campaign banner will be retrieved.
If not set - the plugin tries to identify the tracking by URL search/query params from the browser.
(just like the parcelLab track and trace plugin. - see more infos here)
E.g. if the campaign banner component is implemented on the page /orders.html
,
a user could be routed to /orders.html?tno=1234567&courier=dhl-germany
to see the campaign for the tracking 1234567.
Because the parcellab track and trace plugin and the campaign manager component are using the same query parameters for identifying the tracking, you can just add the <pl-cm-banner>
component to a page that hosts the parcellab track and trace plugin and it should automatically display the right campaign content if a user is viewing a order status page...
@Prop() medium: string = "web";
// not requirerd
// eg.:
<pl-cm-banner medium="email">
Sets the medium for which the campaign content will be retrieved.
Default: web
.
@Prop() contentType: string = "banner_order_status_page";
// not requirerd
// eg.:
<pl-cm-banner content-type="email_banner">
Sets the content type of the retrieved campaignthat will be rendered.
Default: banner_order_status_page
.
@Prop() bannerType: string = "mainBannerVertical";
// not requirerd
// eg.:
<pl-cm-banner banner-type="bannerHorizontal">
Chooses what banner fomr the content type of the retrieved campaign will be rendered.
Default: mainBannerVertical
.
@Prop() language: string;
// not requirerd
// eg.:
<pl-cm-banner language="en">
Sets the users language - to prevent campaigns from different languages to be rendered.
Default: undefined
FAQs
Campaign manager utils for your e-commerce shop/app.
The npm package @parcellab/cm-utils receives a total of 14 weekly downloads. As such, @parcellab/cm-utils popularity was classified as not popular.
We found that @parcellab/cm-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.