
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
chrome-permissions-events-polyfill
Advanced tools
WebExtensions: Polyfill for permissions.onAdded and permissions.onRemoved events for Firefox.
WebExtensions: Polyfill for permissions.onAdded and permissions.onRemoved events for Firefox.
Optional permissions can be added and removed by both Chrome and Firefox, but Firefox doesn't yet support Permission Events: https://bugzilla.mozilla.org/show_bug.cgi?id=1444294
This polyfill will add those two events to Firefox.
You can just download the standalone bundle (it might take a minute to download) and include the file in your manifest.json, or:
npm install chrome-permissions-events-polyfill
import 'chrome-permissions-events-polyfill';
require('chrome-permissions-events-polyfill');
Include the polyfill as a background script and then refer to the original Permissions Events documentation.
This polyfill will exclusively work if permissions are requested/removed from the same page where the listener is. That means, if you run chrome.permissions.request in the background page, only the same exact page will receive the event.
If you want to request from options.html or popup.html, add your request here or send a PR to add support via runtime.sendMessage
chrome.permissions.onAdded.addListener(permissions => {
console.log('New permissions');
console.log(permissions.origins);
console.log(permissions.permissions);
});
chrome.permissions.onRemoved.addListener(permissions => {
console.log('Permissions that have been removed');
console.log(permissions.origins);
console.log(permissions.permissions);
});
content_scripts on custom domains.Awesome WebExtensions: A curated list of awesome resources for Web Extensions development.MIT © Federico Brigante — Twitter
FAQs
WebExtensions: Polyfill for permissions.onAdded and permissions.onRemoved events for Firefox.
The npm package chrome-permissions-events-polyfill receives a total of 8 weekly downloads. As such, chrome-permissions-events-polyfill popularity was classified as not popular.
We found that chrome-permissions-events-polyfill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.