
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
element-from-point
Advanced tools
A consistent cross-browser document.elementFromPoint function. Works around idiosyncracies of old WebKits et al.
ElementFromPoint.js is a cross-browser document.elementFromPoint
function that works consistently across browsers that may implement document.elementFromPoint
differently.
For example, older iOS or Android devices (with WebKit) implement elementFromPoint
such that it takes page (pageX/Y
) coordinates, not viewport (clientX/Y
) coordinates. Use this function to always work with viewport coordinates.
npm install element-from-point
Require and use it as you would use document.elementFromPoint
.
Just make sure to pass in viewport coordinates and you're all set.
var elementFromPoint = require("element-from-point")
document.addEventListener("mousedown", function(ev) {
var el = elementFromPoint(ev.clientX, ev.clientY)
})
ElementFromPoint.js is released under a Lesser GNU Affero General Public License, which in summary means:
For more convoluted language, see the LICENSE
file.
Andri Möll typed this and the code.
Monday Calendar supported the engineering work.
If you find ElementFromPoint.js needs improving, ping me at andri@dot.ee or create an issue online.
1.0.0 (Jun 26, 2016)
FAQs
A consistent cross-browser document.elementFromPoint function. Works around idiosyncracies of old WebKits et al.
The npm package element-from-point receives a total of 18 weekly downloads. As such, element-from-point popularity was classified as not popular.
We found that element-from-point demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.