
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
cordova-support-google-services
Advanced tools
DEPRECATION NOTICE: no longer needed. Use preference GradlePluginGoogleServicesEnabled
for cordova-android
version 9 or higher.
![]() | Your help is appreciated. Create a PR, submit a bug or just grab me :beer: |
---|
As part of enabling Google APIs or Firebase services in your Android application you may have to add the google-services plugin to your build.gradle
file.
cordova plugin add cordova-support-google-services --save
You also need to download google-services.json
on Android and GoogleService-Info.plist
on iOS from Firebase console and put them into the cordova project root folder. Then use <resource-file>
to copy those files into appropriate folders:
<platform name="android">
<resource-file src="google-services.json" target="app/google-services.json" />
...
</platform>
<platform name="ios">
<resource-file src="GoogleService-Info.plist" />
...
</platform>
Note: if you use cordova-android below version 7 specify target="google-services.json"
instead.
It looks like you have another dependency on a google play services lib with a generic verison *
. You have to fix ALL dependency version(s) to be more more specific like 11.0.+
. In order to do that fix version strings for any play services library you have in platforms/android/project.properties
.
Open platform/android/build.gradle
and change version of the first com.android.tools.build:gradle
:
classpath 'com.android.tools.build:gradle:1.2.3+'
Remove google_api_key
and google_app_id
from any existing xml file from platform/android/res/
folder. Those values now come from an automatically generated values.xml
.
FAQs
Cordova plugin to add google service support
We found that cordova-support-google-services demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.