
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
community-cordova-plugin-apps
Advanced tools
This Cordova plugin provides functionality to retrieve information about installed applications on the device, launch applications, and potentially extract APK files. It can be utilized in Cordova-based applications to enhance app management capabilities.
To install the plugin, use the Cordova CLI:
cordova plugin add community-cordova-plugin-apps
Replace community-cordova-plugin-apps
with the URL of the repository hosting the plugin.
getAppList
Retrieve a list of installed applications on the device.
cordova.plugins.AppsPlugin.getAppList(successCallback, errorCallback);
successCallback
: Function to handle the retrieved list of applications.errorCallback
: Function to handle errors.The success callback will receive an array of objects, where each object represents information about an installed application.
getAppByPackageId
Retrieve information about a specific application using its package ID.
cordova.plugins.AppsPlugin.getAppByPackageId(packageId, successCallback, errorCallback);
packageId
: Package ID (e.g., com.example.myapp).successCallback
: Function to handle the retrieved application information.errorCallback
: Function to handle errors.The success callback will receive an object representing information about the specified application.
launchApp
Launch an application using its package ID.
cordova.plugins.AppsPlugin.launchApp(packageId, successCallback, errorCallback);
packageId
: Package ID (e.g., com.example.myapp).successCallback
: Function to handle successful app launch.errorCallback
: Function to handle errors.extractApp
Extract the APK file of an application (requires root access).
cordova.plugins.AppsPlugin.extractApp(packageId, successCallback, errorCallback);
packageId
: Package ID (e.g., com.example.myapp).successCallback
: Function to handle successful APK extraction.errorCallback
: Function to handle errors.Note: Extracting APKs may require root access and is more complex than what is provided in this example. Additional libraries or tools may be necessary.
The AppInfo
object structure returned by the plugin includes the following fields:
name
: Application name.packageName
: Package ID.version
: Application version.icon
: Base64-encoded PNG representation of the application icon.minSdkVersion
: Minimum SDK version required.targetSdkVersion
: Target SDK version.installedDate
: Date of initial installation.lastUpdatedDate
: Date of the last update.installerPackageName
: Package ID of the installer.isSystemApp
: Boolean indicating whether the application is a system app.cordova.plugins.AppsPlugin.getAppList(
function (appList) {
console.log('Installed Applications:', appList);
},
function (error) {
console.error('Error retrieving app list:', error);
}
);
This Cordova Apps Plugin is licensed under the MIT License.
FAQs
A plugin for full detail for apps
The npm package community-cordova-plugin-apps receives a total of 0 weekly downloads. As such, community-cordova-plugin-apps popularity was classified as not popular.
We found that community-cordova-plugin-apps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.