
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@premise/plugin-dynamic-pick-extension
Advanced tools
Dynamic Data Form Extension (Frontend and Backend Plugins)
Welcome to the dynamic-pick-extension plugin! This plugin is a Custom Field Extension that allow you to create <Select>
components that fetches data dynamically from an endpoint. This can be used together with the form-data-backend
plugin to write custom logic to fill the field.
Add the import to your App.tsx
on the frontend package of your backstage instance:
import { DynamicPickFieldExtension } from '@premise/plugin-dynamic-pick-extension';
Then add the imported field extension as a child of ScaffolderFieldExtensions
<ScaffolderFieldExtensions>
<DynamicPickFieldExtension />
</ScaffolderFieldExtensions>
To use the extension on a Backstage Template Action just add the ui-field
and ui-options
fields to the parameter
parameters:
- category:
title: Category
type: string
ui:field: DynamicPickExtension
ui:options:
# IMPORTANT: The endpoint needs to return a JSON array of strings.
external_data: https://dummyjson.com/products/categories
form-data-backend
plugin:parameters:
- team:
title: Github Team to add as admin of the repository
type: string
ui:field: DynamicPickExtension
ui:options:
# This is a provider added on the form-data-backend plugin
form_data: github/teams
FAQs
Dynamic Data Form Extension (Frontend and Backend Plugins)
The npm package @premise/plugin-dynamic-pick-extension receives a total of 121 weekly downloads. As such, @premise/plugin-dynamic-pick-extension popularity was classified as not popular.
We found that @premise/plugin-dynamic-pick-extension demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.