
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cordova-plugin-app-update-silent
Advanced tools
App updater for Cordova/PhoneGap
Try it yourself:
Just clone and install this demo. cordova-plugin-app-update-DEMO :tada:
Star
if it is necessary. :+1:
"cordova-android": "6.3.0"
cordova plugin add cordova-plugin-app-update --save
var updateUrl = "http://192.168.0.1/version.xml";
window.AppUpdate.checkAppUpdate(onSuccess, onFail, updateUrl);
var appUpdate = cordova.require('cordova-plugin-app-update.AppUpdate');
var updateUrl = "http://192.168.0.1/version.xml";
appUpdate.checkAppUpdate(onSuccess, onFail, updateUrl);
appUpdate.checkAppUpdate(onSuccess, onFail, updateUrl, {
'authType' : 'basic',
'username' : 'test',
'password' : 'test'
})
appUpdate.checkAppUpdate(onSuccess, onFail, updateUrl, {
'skipPromptDialog' : true,
'skipProgressDialog' : true
})
You can simply get the versionCode from typing those code in Console
var versionCode = AppVersion.build
console.log(versionCode) // 302048
versionName | versionCode |
---|---|
0.0.1 | 18 |
0.3.4 | 3048 |
3.2.4 | 302048 |
12.234.221 | 1436218 |
<update>
<version>302048</version>
<name>name</name>
<url>http://192.168.0.1/android.apk</url>
</update>
checkAppUpdate
code /**
* 对比版本号
*/
int VERSION_NEED_UPDATE = 201; //检查到需要更新; need update
int VERSION_UP_TO_UPDATE = 202; //软件是不需要更新;version up to date
int VERSION_UPDATING = 203; //软件正在更新;version is updating
/**
* 版本解析错误
*/
int VERSION_RESOLVE_FAIL = 301; //版本文件解析错误 version-xml file resolve fail
int VERSION_COMPARE_FAIL = 302; //版本文件对比错误 version-xml file compare fail
/**
* 网络错误
*/
int REMOTE_FILE_NOT_FOUND = 404;
int NETWORK_ERROR = 405;
/**
* 没有相应的方法
*/
int NO_SUCH_METHOD = 501;
/**
* Permissions
*/
int PERMISSION_DENIED = 601;
/**
* 未知错误
*/
int UNKNOWN_ERROR = 901;
Android only
MIT
FAQs
Cordova App Update
The npm package cordova-plugin-app-update-silent receives a total of 0 weekly downloads. As such, cordova-plugin-app-update-silent popularity was classified as not popular.
We found that cordova-plugin-app-update-silent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.