
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
The simple module to detect device shocks like side bump or knock. It uses Motion API and only works in browsers.
There is many use-cases to make your site/app more interactive and featured. Several cases for example:
🐈 With yarn:
yarn add devshock
🛠 With npm:
npm install devshock
Navigate to GitHub Pages hosted example.
It's better to use your smartphone, so it has accelerometer.
This project written with TypeScript and it better to use it in projects built with some assembly systems like Webpack or Gulp.
Anyway, you can build it and use it as a single js file with:
yarn build
So you'll get a dist folder with devshock.js which can be integrated in your project as raw js lib.
To test the lib use next command and follow to https://<internal_ip>:8080 from your mobile device:
yarn serve
TypeScript:
import DevShock, { ShockEventData } from 'devshock'
const dshock = new DevShock()
if (dshock.available())
dshock.addListener('shock', (ev: ShockEventData) => {
console.log(ev)
// { timeStamp: 1620159608431, side: 'left', force: 23 }
})
JavaScript:
<script src="https://raw.githubusercontent.com/jkulvich/devshock/main/docs/devshock.js"></script>
const dshock = new DevShock()
if (dshock.available())
dshock.addListener('shock', ev => {
console.log(ev)
// { timeStamp: 1620159608431, side: 'left', force: 23 }
})
FAQs
📱🔨 Device shock detector based on MotionAPI
We found that devshock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.