Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
amp-iframe-resize-child
Advanced tools
A teeny tiny (0.37 kb before gzip) resize handler for child iframes, that supports the [AMP-style resize event messages](https://ampbyexample.com/components/amp-iframe/#resizable-iframes).
A teeny tiny (0.37 kb before gzip) resize handler for child iframes, that supports the AMP-style resize event messages.
Use this module if you're creating content that will be consumed in AMP articles that needs the parent frame to be resized to fit.
This script binds a mutation observer to the body & listener to the resize event so it will check for changes to dimensions whenever your content does, or if the window resizes.
Install the package from NPM (npm i amp-iframe-resize-child
);
Then add the listeners like so:
const resizeHandler = require('amp-iframe-resize-child');
resizeHandler();
If you liked this module, you might also like the amp-iframe-parent-resize module which lets your non-AMP parent page handle resize events from AMP articles such as this.
FAQs
A teeny tiny (0.37 kb before gzip) resize handler for child iframes, that supports the [AMP-style resize event messages](https://ampbyexample.com/components/amp-iframe/#resizable-iframes).
The npm package amp-iframe-resize-child receives a total of 191 weekly downloads. As such, amp-iframe-resize-child popularity was classified as not popular.
We found that amp-iframe-resize-child demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.