
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
daisywheel
Advanced tools
The Steam 'Big Picture' Daisywheel ported to JS and CSS. Supports Gamepad API.
The Steam "Big Picture" Daisywheel ported to Javascript and CSS. Works with the Gamepad API, available in the latest modern browsers.
This interface is something every game with text input needs. Not a single game should present a QWERTY keyboard to a user with a controller in their hands. I ported this so that the growing HTML5 gaming community can use it in their games as a standard library in the user interface toolkit.
A live demo can be found here
Instructions on use can be found at daisywheeljs.org.
There you'll find:
To setup your own build and/or contribute, pull down a clone of the repo. Run npm install
to install dependencies. After making changes to either the daisywheel.js file or the less
files run gulp
and a build version of the files will be generated. The process should look like this:
git clone git@github.com:likethemammal/daisywheeljs.git
cd daisywheeljs
npm install
//make some changes
gulp
gamepad-mod.js
interfaces with the browser API and organizes the data sent over in the controller's events. It was a modification of the gamepad.js
library found in the example code for the HTML5Rocks gamepad tester, which can be found in its orginal form here
This is licensed under the MIT Open-source License.
FAQs
The Steam 'Big Picture' Daisywheel ported to JS and CSS. Supports Gamepad API.
The npm package daisywheel receives a total of 5 weekly downloads. As such, daisywheel popularity was classified as not popular.
We found that daisywheel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.