
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@seontechnologies/seon-javascript-sdk
Advanced tools
SEON JavaScript SDK for collecting session and device data
To successfully utilize this library, you must have a SEON account set up. (https://seon.io)
You can either use one of our CDNs, or this npm package to load the SDK.
It is preferred to use one of our CDNs directly, because this way you will always receive the latest version.
<script src="https://cdn.dfsdk.com/js/v6/agent.umd.js"></script>
<!-- or -->
<script src="https://cdn.deviceinf.com/js/v6/agent.umd.js"></script>
<!-- or -->
<script src="https://cdn.seonintelligence.com/js/v6/agent.umd.js"></script>
Then in your JavaScript you can use the window.seon
object:
// On page load
window.seon.init();
// Later when the fingerprint is needed
const session = await window.seon.getSession();
// 'session' variable holds the encrypted device fingerprint as a base64 encoded string
For more information about the config options, please visit https://docs.seon.io/api-reference/fraud-api#javascript-agent-v6 .
This will give you the collected device info in an encrypted format. You can not decrypt it yourself,
you have to send it as the session
parameter to SEON's proprietary Fraud API (see https://docs.seon.io/api-reference/fraud-api).
The Fraud API will return the device fingerprint in the device_details
field.
Note that with this method you will have to keep the package updated yourself to include our latest features and bugfixes.
npm install @seontechnologies/seon-javascript-sdk
# or
yarn add @seontechnologies/seon-javascript-sdk
In our package we do not include polyfills but we rely on newer browser features like Promise functionality (namely Promise.allSettled) support. Including polyfills are required for older browser support.
Usage:
import seon from '@seontechnologies/seon-javascript-sdk';
// or
// const seon = require('@seontechnologies/seon-javascript-sdk');
// On page load
seon.init();
// Later when the fingerprint is needed
const session = await seon.getSession();
// 'session' variable holds the encrypted device fingerprint as a base64 encoded string
For more information and configuration options, visit our public GitHub repository and consult the API reference.
FAQs
SEON JavaScript SDK for collecting session and device data
The npm package @seontechnologies/seon-javascript-sdk receives a total of 0 weekly downloads. As such, @seontechnologies/seon-javascript-sdk popularity was classified as not popular.
We found that @seontechnologies/seon-javascript-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.