
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
chrome-permissions-events-polyfill
Advanced tools
WebExtensions: Polyfill for permissions.onAdded and permissions.onRemoved events for Firefox.
WebExtensions: Polyfill for permissions.onAdded and permissions.onRemoved events for Firefox.
Optional permissions can be added and removed by both Chrome and Firefox, but Firefox doesn't yet support Permission Events: https://bugzilla.mozilla.org/show_bug.cgi?id=1444294
This polyfill will add those two events to Firefox.
You can just download the standalone bundle (it might take a minute to download) and include the file in your manifest.json, or:
npm install chrome-permissions-events-polyfill
import 'chrome-permissions-events-polyfill';
require('chrome-permissions-events-polyfill');
Include the polyfill as a background script and then refer to the original Permissions Events documentation.
This polyfill will exclusively work if permissions are requested/removed from the same page where the listener is. That means, if you run chrome.permissions.request in the background page, only the same exact page will receive the event.
If you want to request from options.html or popup.html, add your request here or send a PR to add support via runtime.sendMessage
chrome.permissions.onAdded.addListener(permissions => {
console.log('New permissions');
console.log(permissions.origins);
console.log(permissions.permissions);
});
chrome.permissions.onRemoved.addListener(permissions => {
console.log('Permissions that have been removed');
console.log(permissions.origins);
console.log(permissions.permissions);
});
content_scripts on custom domains.Awesome WebExtensions: A curated list of awesome resources for Web Extensions development.MIT © Federico Brigante — Twitter
FAQs
WebExtensions: Polyfill for permissions.onAdded and permissions.onRemoved events for Firefox.
The npm package chrome-permissions-events-polyfill receives a total of 10 weekly downloads. As such, chrome-permissions-events-polyfill popularity was classified as not popular.
We found that chrome-permissions-events-polyfill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.