Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Dalliance is a genome viewing tool that aims to offer a high level of interactivity while working entirely within your web browser. It works with current versions of Chrome, Firefox, and Safari and (with minor visual glitches) Internet Explorer 11. It is also usable with current mobile web browsers.
To try it, visit http://www.biodalliance.org/human37.html.
Dalliance has now switched to a Gulp-based build system. It it still possible to use the files in the js directory directly, but this is now deprecated and may not be supported in future.
Before building, please install Node.js, which is needed for the NPM package manager.
To build:
(sudo?) npm install -g gulp
npm install # Install dependencies
gulp # Build Dalliance
...then open any of the HTML files in the example-browsers
directory
to test.
Dalliance loads data via the DAS protocol. There's a button to click that will let you add DAS sources. If what you're after is in the registry, you should just be able to select and add, otherwise you'll need to type a URL.
You can also add data directly from indexed binary files (currently bigwig, bigbed and BAM, probably other formats in the future). Binary files can either be hosted on a web server or loaded from local disk.
However, there is one caveat. Since Dalliance is a pure Javascript program running in your web browser, it is normally subject to the "same origin policy", which only permits Javascript code to access resources on the same server. To get round this, DAS servers need to support the W3C CORS extension. The latest versions of Dazzle, Proserver and MyDAS should implement this by default.
Dalliance is under active development and we welcome your suggestions. Right now, probably the best place for bug reports or feature requests is the Github issue tracker.
There is also a mailing list where the project can be discussed.
FAQs
Fast, embeddable genome visualization
We found that dalliance demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.