
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
eeaas-snake
Advanced tools
This is an easter egg to be used with the "eeaas" package.
yarn add eeaas
yarn add eeaas-snake
Once installed you can import the easter egg and enable it.
import Eeaas from 'eeaas';
import Snake from 'eeaas-snake';
Eeaas.register(Snake); // Register snake
Eeaas.enable(); // Enable all easter eggs, or alternatively use `Eeaas.Eggs.Snake.enable()` to only enable snake
To test if it works type "snake" while the app is running. You should be presented with a 2D snake game. Use the "esc" key to cancel the game.
To use different keylisteners change the startTrigger
and/or stopTrigger
attributes on the Snake object.
import Eeaas from 'eeaas';
import Snake from 'eeaas-snake';
Snake.startTrigger = 'secretstring';
Snake.stopTrigger = ['esc', 'stop'];
Eeaas.register(Snake);
Eeaas.enable();
Now, typing "secretstring" will launch the game. Cancel the game by pressing the "esc" key or typing "stop".
To write your own custom methods you'll have to overwrite the enable
and disable
attributes on the Snake object as well as the relevant "trigger" attributes.
Example: You want to trigger the game only when a button is clicked
Add a button to your markup:
<button id="snake-trigger-button">Snake trigger</button>
Update the enable
, disable
and startTrigger
attributes:
import Eeaas from 'eeaas';
import Snake from 'eeaas-snake';
Object.assign(Snake, {
enable() {
this.startTrigger();
},
disable() {
document.getElementById('snake-trigger-button').removeEventListener('click', this.start);
this.stop();
},
startTrigger() {
// The button needs to be in the DOM by the time this code runs
document.getElementById('snake-trigger-button').addEventListener('click', this.start);
}
});
Eeaas.register(Snake);
Eeaas.enable();
FAQs
Snake
The npm package eeaas-snake receives a total of 0 weekly downloads. As such, eeaas-snake popularity was classified as not popular.
We found that eeaas-snake demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.