Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
cordova-plugin-firebase-m0dch3n
Advanced tools
This plugin brings push notifications, analytics, event tracking, crash reporting and more from Google Firebase to your Cordova project! Android and iOS supported.
>= 6
>= 6.4
>= 4
Install the plugin by adding it to your project's config.xml:
<plugin name="cordova-plugin-firebase" spec="^2.0.0" />
or by running:
cordova plugin add cordova-plugin-firebase --save
Great installation and setup guide by Medium.com - https://medium.com/@felipepucinelli/how-to-add-push...
Download your Firebase configuration files, GoogleService-Info.plist for iOS and google-services.json for android, and place them in the root folder of your cordova project. Check out this firebase article for details on how to download the files.
- My Project/
platforms/
plugins/
www/
config.xml
google-services.json <--
GoogleService-Info.plist <--
...
platforms/ios/\<My Project\>/Resources
for ios and platforms/android
for android.Hooks do not work with PhoneGap Build. This means you will have to manually make sure the configuration files are included. One way to do that is to make a private fork of this plugin and replace the placeholder config files (see src/ios
and src/android
) with your actual ones, as well as hard coding your app id and api key in plugin.xml
.
If you are using cordova-cli@9
(i.e. cordova-lib@9
) then you might need to install the xcode
npm module dependency separately. To
do that, just run this command npm i xcode --save-dev
in your app.
Your build may fail if you are installing multiple plugins that use Google Play Services. This is caused by the plugins installing different versions of the Google Play Services library. This can be resolved by installing cordova-android-play-services-gradle-release.
If your build is still failing, you can try installing cordova-android-firebase-gradle-release. For more info, read the following comment about locking down the specific versions for play services and firebase. It is suggested to use +
instead of 15.+
to ensure the correct versions are used.
Checkout our guide for info on setting up Google Tag Manager.
Checkout our guide for info on configuring notification icons and colors.
See the full API available for this plugin.
FAQs
Cordova plugin for Google Firebase
The npm package cordova-plugin-firebase-m0dch3n receives a total of 25 weekly downloads. As such, cordova-plugin-firebase-m0dch3n popularity was classified as not popular.
We found that cordova-plugin-firebase-m0dch3n demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.