
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@zomoz/crossvent
Advanced tools
Cross-platform browser event handling
The event handler API used by dominus.
Using Bower
bower install -S crossvent
Using npm
npm install -S crossvent
The API exposes a few methods that let you deal with event handling in a consistent manner across browsers.
crossvent.add(el, type, fn, capturing?)
Adds an event listener fn
of type type
to DOM element el
.
crossvent.add(document.body, 'click', function (e) {
console.log('clicked document body');
});
crossvent.remove(el, type, fn, capturing?)
Removes an event listener fn
of type type
from DOM element el
.
crossvent.add(document.body, 'click', clicked);
crossvent.remove(document.body, 'click', clicked);
function clicked (e) {
console.log('clicked document body');
}
crossvent.fabricate(el, type, model?)
Creates a synthetic custom event of type type
and dispatches it on el
. You can provide a custom model
which will be accessible as e.detail
.
crossvent.add(document.body, 'sugar', sugary);
crossvent.fabricate(document.body, 'sugar', { onTop: true });
function sugary (e) {
console.log('synthetic sugar' + e.detail.onTop ? ' on top' : '');
}
MIT
FAQs
Cross-platform browser event handling
The npm package @zomoz/crossvent receives a total of 0 weekly downloads. As such, @zomoz/crossvent popularity was classified as not popular.
We found that @zomoz/crossvent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.