Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
electron-devtools-vendor
Advanced tools
electron-devtools-vendor <img alt="GitHub repo size" src="https://img.shields.io/github/r
when using this library, you will not see the following warning:
Unrecognized manifest key 'browser_action'.
Unrecognized manifest key 'minimum_chrome_version'.
Unrecognized manifest key 'short_name'.
Unrecognized manifest key 'update_url'.
Permission 'activeTab' is unknown or URL pattern is malformed.
Cannot load extension with file or directory name _metadata. Filenames starting with "_" are reserved for use by the system.
it will not download the crx to a directory on the current computer, but will contain the source code of the plugin directly in the node_modules
Don't worry about the size of your project, as you should only use it in a development environment, and even if you need to use it in a formal environment, we have
tree snaking
to help.
because the plugin source code is in node_modules
, it will have a greater success rate of downloading.
$ yarn add electron-devtools-vendor -D
// or
$ npm install electron-devtools-vendor -D
// or
$ pnpm add electron-devtools-vendor -D
const { session } = require("electron");
if (process.env.NODE_ENV === "development") {
const { REACT_DEVELOPER_TOOLS } = require("electron-devtools-vendor");
session.defaultSession.loadExtension(REACT_DEVELOPER_TOOLS, {
allowFileAccess: true,
});
}
name | import name | hash |
---|---|---|
REACT_DEVELOPER_TOOLS | react-developer-tools | fmkadmapgofadopljbjfkapdkoienihi |
EMBER_INSPECTOR | ember-inspector | bmdblncegkenkacieihfhpjfppoconhi |
VUEJS_DEVTOOLS | vuejs-devtools | nhdogjmejiglipccpnnnanhbledajbpd |
REDUX_DEVTOOLS | redux-devtools | lmhkpmbekcpmknklioeibfkpmmfibljd |
APOLLO_DEVELOPER_TOOLS | apollo-developer-tools | jdkknkkbebbapilgoeccciglkfbmbnfm |
MOBX_DEVTOOLS | mobx-devtools | pfgnfdagidkfgccljigdamigbcnndkod |
JQUERY_DEBUGGER | jquery-debugger | dbhhnnnpaeobfddmlalhnehgclcmjimi |
BACKBONE_DEBUGGER | backbone-debugger | bhljhndlimiafopmmhjlgfpnnchjjbhd |
# this is example
$ yarn run add fmkadmapgofadopljbjfkapdkoienihi --name react-devtools
Thanks to electron-devtools-installer for the inspiration, it was great but there were a few issues that forced me to develop this project, details can be found at: electron-devtools-installer#200
FAQs
electron-devtools-vendor <img alt="GitHub repo size" src="https://img.shields.io/github/r
The npm package electron-devtools-vendor receives a total of 27 weekly downloads. As such, electron-devtools-vendor popularity was classified as not popular.
We found that electron-devtools-vendor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.