
Research
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
@smile_identity/smart-camera-web
Advanced tools
WebComponent for smartly capturing images on the web, for use with SmileIdentity
This is a WebComponent library built to enable us capture selfies and liveness images for use with SmileIdentity.
It works in concert with our server-side libraries.
We support installation through NPM and by adding a script tag from our CDN
npm install @smile_identity/smart-camera-web@<version>
In your VueJS / AngularJS / React page or component, import the package this way
import '@smile_identity/smart-camera-web'
<script src="https://cdn.smileidentity.com/js/<version>/smart-camera-web.js"></script>
After installing, and importing if required, you can use the web-component by following these two steps
<smart-camera-web>
</smart-camera-web>
imagesComputed
event in your page / componentconst smartCameraWeb = document.querySelector('smart-camera-web');
smartCameraWeb.addEventListener('imagesComputed', (e) => {
const data = e.detail;
// add any textual data that may be required here
});
imagesComputed
is a CustomEvent returning data — in e.detail
— of the shape:
{
partner_params: {
libraryVersion: String,
permissionGranted: Boolean, // expected to be `true`
},
images: [
{
file: '',
image_type_id: Number, // as recommended here: https://docs.smileidentity.com/products/core-libraries#images-required
image: String // base64 encoded string of image
}
]
}
We advise that the partner_params
published be merged with other partner_params
sent with your request.
This library can be used with most JS frameworks / libraries directly. However, for ReactJS, there need to be a few extra steps. This is due to the cross-compatibility issues between React and WebComponents.
In order to work around this, we've found this tutorial helpful in the past.
This library has been tested on the latest versions of Chrome, Edge, Firefox, and Safari. If any issues are found with some browsers, please notify us.
FAQs
WebComponent for smartly capturing images on the web, for use with SmileIdentity
The npm package @smile_identity/smart-camera-web receives a total of 839 weekly downloads. As such, @smile_identity/smart-camera-web popularity was classified as not popular.
We found that @smile_identity/smart-camera-web demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
Product
A single platform for static analysis, secrets detection, container scanning, and CVE checks—built on trusted open source tools, ready to run out of the box.
Product
Socket is launching experimental protection for the Hugging Face ecosystem, scanning for malware and malicious payload injections inside model files to prevent silent AI supply chain attacks.