
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@trimble-oss/trimble-id
Advanced tools
Trimble Identity SDK developer documentation for TypeScript.
📚 Documentation - 🚀 Getting Started - 💬 Support
Using npm in your project directory run the following command:
npm install @trimble-oss/trimble-id
Create a new application in the Trimble Developer Console portal and configure the following settings:
To register your service application in Trimble Developer Console:
On the left pane select Identity Management > Applications.
On the Applications home page, in the top right corner select + NEW APPLICATION. The Create Application page displays.
Select Continue to enter the applications details.
| Field | Description |
|---|---|
| Name | Name of your application |
| Display Name | Provide a display name of the application. |
| Description | Provide a description for the application. |
Configure Grant Type and Token preferences of your application choice.
| Field | Description |
|---|---|
| Application Grant Types | Select the grant types that will be used for authenticating users or applications. |
| Allowed Callback URLS | Refers to the redirect URI of the application after logging into Identity. More than one URL can be added to this field. The total URI length should not exceed 400kb. This field appears only when you select the Authorization Grant type. |
| Allowed Logout URLS | The URIs that Identity can redirect to after log out. More than one UL can be added to this field. The total URI length should not exceed 400kb. This field appears only when you select the Authorization Grant type. |
Select "Create Application" to save changes.
Take note of the Client ID and URLs under the "Basic Information" section. You'll need these values to configure the SDK.
For more information, see Authentication documentation.
To provide feedback or report a bug, please raise an issue on our issue tracker.
Send email to support@trimble.com
FAQs
Trimble Identity SDK for JavaScript/TypeScript
The npm package @trimble-oss/trimble-id receives a total of 1,831 weekly downloads. As such, @trimble-oss/trimble-id popularity was classified as popular.
We found that @trimble-oss/trimble-id demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.