Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
easycanvas
Advanced tools
Easycanvas是一个轻量、高效率的渐进式canvas渲染库,核心思路是由数据的变化来驱动视图的变化。将canvas与一个树形的数据结构绑定,当数据改变时视图将随之更新,并且提供了一个Chrome插件来便于开发,包括数据结构的显示、对canvas中某个元素的样式进行调整等。并且提供了一些插件,支持物理引擎、3D模型渲染等扩展功能。
A lite(30kb) canvas library, includes a Chrome plugin for debugging. Support physics and animations with high performace. Suits mobile, PC(including IE) and Chinese '微信小程序/小游戏'.
Expandable: Support highly decoupled components and custom API/events.
npm run dev
, then localhost:8080/demos/demo1.html
.Throw ./plugin/dist
to Chrome://extensions
.
build/easycanvas.js
: Node module.
build/easycanvas.standalone.dev.js
: Standalone version, support chrome develop tools.
build/easycanvas.standalone.prod.js
: Standalone version for production mode, 20kb+.
Following plugins support node version, 'standalone.dev' and 'standalone.prod' version.
FAQs
Canvas framework. See https://c-zhuo.github.io/easycanvas/
The npm package easycanvas receives a total of 2 weekly downloads. As such, easycanvas popularity was classified as not popular.
We found that easycanvas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.