Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
electron-twitter
Advanced tools
Tutorial / Hello world style application on top of Electron to give it a good spin
Simplified tutorial / hello world style Electron js application. Demonstrated the common way of how to use web technologies on desktop environment in a cross-platform compatible manner. Application uses Twitter API to fetch tweets of the user. Requires TOKEN, KEY to be present for the Twitter API to function properly. Application is ugly as zero CSS is involved but mainly shows how to get a cross-platform compatible application running in desktop environment with web technologies.
Details are provided as part of the environmental variables the application requires to run.
As it's not currently packed into a distributable of it's own as that warrants for another tutorial on it's own we are just simply going to run it through NPM and jump through some hoops.
Here we go: cd some/temp/location/ npm install electron-twitter cd node_modues/electron-twitter npm install
You need to go to Twitters manage applications and create yourself a simple application. The details do not matter. What matter are the following variables you are going to need from there:
Consumer Key (API Key)
Consumer Secret (API Secret)
Access Token
Access Token Secret
Once you have generated the application following the on-screen instructions, you can simply switch to the Keys and Access tokens tab and copy the values. You need to set the values from there into the following environmental variables for the application to load tweets for you:
Windows example (note: these are just made up values):
set TWITTER_TOKEN_SECRET=7A7bR56LFuY9KaYo7qoFLpsKt3ly7CwWBJolLrBrUmWheiIuZqxgdJ
set TWITTER_CONSUMER_SECRET=7A7bR56LFuY9KaYo7qoFLpsKt3ly7CwWBJolLrBrUmWheiIuZqxgdJ
set TWITTER_TOKEN_KEY=7A7bR56LFuY9KaYo7qoFLpsKt3ly7CwWBJolLrBrUmWheiIuZqxgdJ
set TWITTER_TOKEN_SECRET=7A7bR56LFuY9KaYo7qoFLpsKt3ly7CwWBJolLrBrUmWheiIuZqxgdJ
set TWITTER_USER=mikaturunen
Once the values are set, the application will fetch the latest tweets from the provided TWITTER_USER and display them. If the values are not set, no tweets will be displayed.
After you have installed electron-twitter, running it can be simply done by
npm start
It obviously is lacking in the UI department as it's a tutorial usage / hello world style entry into Electro. I wanted to show how simple it is to build applications in a cross-platform manner for desktops with web technologies, not make it look pretty. Obviously that would be a great next step for another tutorial, we'll see :)
FAQs
Tutorial / Hello world style application on top of Electron to give it a good spin
We found that electron-twitter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.