
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cordova-plugin-file-downloader
Advanced tools
Downloads files to persistant Storage on your Phone, checks md5sum if you want, unzips packed files if necessary (For Android and iOS)
Cordova plugin to download a List of files or a single file to the Phone, check consistency and unzip if necessary (Android and ios)
cordova plugin add cordova-plugin-file-downloader
downloader.init({folder: "yourPersistantAppFolder", unzip: true});
options:
DOWNLOADER_noWifiConnection
event [default: false]downloader.get("http://yourhost.de/some.zip");
downloader.getMultipleFiles([
{url:"http://yourhost.de/some1.zip"},
{url:"http://yourhost.de/some2.zip"},
{url:"http://yourhost.de/some3.zip"}
]);
You have to re-init downloader after aborting an transfer
downloader.abort();
document.addEventListener(eventName, function(event){
var data = event.data;
});
eventNames:
DOWNLOADER_initialized data:none
DOWNLOADER_gotFileSystem data:[cordova.fileSystem fileSystem]
DOWNLOADER_gotFolder data:[cordova.fileEntry folder]
DOWNLOADER_error data:[object error]
DOWNLOADER_noWifiConnection data:none
DOWNLOADER_downloadSuccess data:[cordova.fileEntry entry]
DOWNLOADER_downloadError data:[object error]
DOWNLOADER_downloadProgress data:[number percentage, string fileName]
DOWNLOADER_unzipSuccess data:[string fileName]
DOWNLOADER_unzipError data:[string fileName]
DOWNLOADER_unzipProgress data:[number percentage, string fileName]
DOWNLOADER_fileRemoved data:[cordova.fileEntry entry]
DOWNLOADER_fileRemoveError data:[cordova.fileEntry entry]
DOWNLOADER_getFileError data:[object error]
DOWNLOADER_fileCheckSuccess data:[string md5sum, string fileName]
DOWNLOADER_fileCheckFailed data:[string calculatedMd5sum, string md5, string fileName])
DOWNLOADER_fileCheckError data:[object error]
downloader.init({folder: "testApp"});
downloader.get("http://yourhost.de/some.txt");
downloader.init({folder: "testApp"});
downloader.get("http://yourhost.de/some.txt", null, "ohername.txt");
downloader.init({folder: "testApp", unzip: true});
downloader.get("http://yourhost.de/some.zip");
downloader.init({folder: "testApp", unzip: true, delete: false});
downloader.get("http://yourhost.de/some.zip");
downloader.init({folder: "testApp", unzip: true, check: true});
downloader.get("http://yourhost.de/some.zip", "3f4ea2219aa321ef5cd3143ea33076ab");
downloader.init({folder: "testApp", unzip: true, check: true});
downloader.get("http://yourhost.de/abort.zip");
downloader.abort();
downloader.init({folder: "testApp", unzip: true, check: true});
downloader.get("http://yourhost.de/another.zip");
downloader.init({folder: "testApp", unzip: true, check: true});
downloader.getMultipleFiles([
{url: "http://yourhost.de/some1.zip", md5:"1f4ea2219aa321ef5cd3143ea33076ac"},
{url: "http://yourhost.de/some2.zip", md5:"2f4ea2219aa321ef5cd3143ea33076ad"},
{url: "http://yourhost.de/some3.zip", md5:"3f4ea2219aa321ef5cd3143ea33076ae"}
]);
Changes 0.3.2 -> 0.4.0
FAQs
Downloads files to persistant Storage on your Phone, checks md5sum if you want, unzips packed files if necessary (For Android and iOS)
We found that cordova-plugin-file-downloader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.