
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
backbone-events-standalone
Advanced tools
This is an extraction of the Events module of Backbone which can be used standalone (no external dependency), in the browser or in a nodejs environment.
This project started because I appreciate the Backbone.Events interface &
features while I wanted to keep using it within non-DOM environments (think a
Social API Web Worker for example).
I've ported the original Backbone.Events tests to mocha & chai so I can run them within a nodejs environment and ensure the extracted API actually works as expected without the burden of setting up continuous integration of browser tests.
$ bower install backbone-events-standalone
$ npm install backbone-events-standalone
<script src="backbone-events-standalone.js"></script>
<script>
// use BackboneEvents
</script>
Notes:
backbone-events-standalone.min.js.bower_components/backbone-events-standalonerequire(["backbone-events-standalone"], function(BackboneEvents) {
// ...
});
var BackboneEvents = require("backbone-events-standalone");
The BackboneEvents#mixin method helps extending any object or prototype to add eventing
support to it:
var myEventEmitter = BackboneEvents.mixin({});
myEventEmitter.on("foo", console.log).trigger("foo", "hello emitter");
// alternatively
function Plop() {}
BackboneEvents.mixin(Plop.prototype);
(new Plop()).on("foo", console.log).trigger("foo", "hello emitter");
BackboneEvents API & usage is the same as Backbone.Events.
$ npm test
MIT
Jeremy Ashkenas, Backbone author
FAQs
Standalone version of Backbone.Events
The npm package backbone-events-standalone receives a total of 7,184 weekly downloads. As such, backbone-events-standalone popularity was classified as popular.
We found that backbone-events-standalone demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.

Research
A malicious package uses a QR code as steganography in an innovative technique.

Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.