
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@superrb/kunstmaan-addons-messaging-service
Advanced tools
Messaging service for use on Kunstmaan front end
A simple service to allow notification-style messaging on the front end of Kunstmaan CMS websites.
## Installation
yarn add @superrb/kunstmaan-addons-messaging-service
Add the HTML container somewhere on the page. This will pull messages from Symfony's session flashbag
<ul id="messages" class="messages" data-turbolinks-permanent>
{% for type, messages in flash %}
{% for message in messages %}
<li class="message message--{{ type }}" {% if type != 'error' %}data-timeout="5000"{% endif %}>
<span class="message__text">
{{ message | trans }}
</span>
<button class="message__close">
<span class="screenreader-text">Close message</span>
</button>
</li>
{% endfor %}
{% endfor %}
</ul>
The data-timeout
attribute sets a time in ms after which the message will disappear.
### Creating messages
import messagingService from '@superrb/kunstmaan-addons-messaging-service'
// Persistent messages
messagingService.info('This a message')
messagingService.error('This is an error message')
messagingService.warning('This is a warning message')
messagingService.success('This is a success message')
// Auto-hide message after 5 seconds
messagingService.info('This message will hide after 5 seconds', 5000)
// Close all visible messages (handy to call on `turbolinks:visit`)
messagingService.closeAll()
## Authors
FAQs
Messaging service for use on Kunstmaan front end
We found that @superrb/kunstmaan-addons-messaging-service demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.