Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
App tester is an app built with all plugins known to vigour which presents the user with an input box allowing him to be redirected wherever. It's intended use is to help with app development.
http(s)://
) in the input boxDebugging requires the device to be plugged into your computer. Simulators and emulators should also work the same way.
chrome://inspect
adb logcat
(more info)develop
menu, find the device running the app-tester. In that submenu, you should find the page currently loaded.When the native code for a plugin changes, a new version of the app-tester has to be built and published to hockeyapp.
Building is as easy as npm run android
or npm run ios
. Of course you will need to have the tools for these platforms installed:
ANDROID_HOME
environment variable must point to the location of the Android SDK installation. In my case, I have:$ echo $ANDROID_HOME
/Users/shawn/android-sdks/
To publish an app to hockey, you will of course need the credentials to the hockey account, which you can find here
Building for Android creates a .apk file
. Simply upload this file to hockeyapp to allow others to install it.
Building for iOS creates an xcode project and workspace. If you open the workspace in xcode, you can then archive the project and export it as a .ipa
file which can be uploaded to hockey. The archiving and exporting parts require that you have some certificates and provisioning profiles in your keychain. Make sure you make a development build, otherwise the app-tester will lose it's debugging capabilities.
FAQs
Page + build for testing (on native)
We found that app-tester demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.