Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
cordova-plugin-dialonce
Advanced tools
This is a plugin that allows your Cordova or PhoneGap app to easily integrate the Dial Once SDK.
The Dial Once SDK is brought in automatically. There is no need to change or add anything in your code source.
To install the plugin in your Cordova app, run the following command:
$ cordova plugin add cordova-plugin-dialonce --variable ANDROID_API_KEY="<ANDROID_API_KEY>"
To add the plugin to your PhoneGap app, add the following snippet to your config.xml
:
<gap:plugin name="cordova-plugin-dialonce" source="npm">
<param name="ANDROID_API_KEY" value="<ANDROID_API_KEY>" />
</gap:plugin>
The Cordova command line tooling is based on node.js so first you’ll need to install node then you can install Cordova by executing:
$ npm install -g cordova
Create a new app by executing:
$ cordova create <project-name> [app-id] [app-name]
Specify a set of target platforms by executing:
$ cordova platform add <platform>
The only available platform at the moment is Android, iOS is coming soon.
Install the dialonce-cordova plugin by executing:
$ cordova plugin add cordova-plugin-dialonce --variable ANDROID_API_KEY="<ANDROID_API_KEY>"
# Create initial Cordova app
$ cordova create myApp
$ cd myApp/
$ cordova platform add android
$ cordova plugin add cordova-plugin-dialonce --variable ANDROID_API_KEY="<ANDROID_API_KEY>"
FAQs
Cordova plugin for Dial Once
The npm package cordova-plugin-dialonce receives a total of 1 weekly downloads. As such, cordova-plugin-dialonce popularity was classified as not popular.
We found that cordova-plugin-dialonce demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.