
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
embed-fbcmt-client
Advanced tools
This is a plugin allow embed Facebook Comment Plugin to website SPA
Demo: https://anime-vsub.github.io/embed-fbcmt?href=https://google.com&no_socket=true&num_posts=20
Append this code to location show comment:
<iframe src="https://anime-vsub.github.io/embed-fbcmt?<options>"></iframe>
All mentioned
options of FB comment pluginare available. In addition, you can also use some of the following custom options:
| Option | Type | Default | Description |
|---|---|---|---|
lang | code lang | en_US | language the plugin will display (example: vi_VN, ja_JP...) |
loader_bg | color | rgba(0,0,0,0.8) | adjust background color when plugin is loading |
loader_text | color | white | adjust text color when plugin is loading |
origin | host name | * | domain name will be sent the message. you can specify the hostname of the embedded website to increase security |
no_socket | boolean | false | whether to disable WebSocket to save resources |
active | boolean | true | if this plugin is enabled if false then the plugin displays a blank page |
no_popup | boolean | false | remove loading popup and use error warnings when you customize them |
This package allows you to send change requests to the plugin without losing the SDK reload time. A useful thing for SPA website
pnpm add embed-fbcmt-client
You can use this plugin anywhere I will give an example with Vue
<template>
<button @click="setPropValue(cmtRef, 'lang', 'ja_JP')">Change lang to Japanese</button>
<iframe ref="cmtRef" src="https://anime-vsub.github.io/embed-fbcmt?https://google.com&lang=en_US" />
</template>
<script lang="ts" setup>
import { ref } from "vue"
import { setPropValue } from "embed-fbcmt-client/vue"
const cmtRef = ref<HTMLIFrameElement>()
</script>
function setPropValue(el: HTMLIFrameElement | Ref<HTMLIFrameElement>, propName: string, value: string): Promise<void>
el: iframe embed pluginpropName: option name setvalue: value set to propPromise<void> a promise that resolves when the set option succeeds or failsfunction listenEvent(
el: HTMLIFrameElement,
cb: (event: { type: "success" | "loading" | "error"; code: CODES }) => void
): () => void
el: iframe embed plugincb: this function is cakked every time something changes in the embed() => void cancelfunction listenResize(
el: HTMLIFrameElement,
type: "width" | "height",
cb: (size: number) => void
): () => void
el: iframe embed plugincb: this function is cakked every time something changes in the embed() => void cancelfunction useEmbed(el: HTMLIFrameElement | Ref<HTMLIFrameElement>): {
code: CODES // code status embed
loading: boolean // true is loading
error: boolean // true is error emited
}
component:
<template>
<EmbedFbCmt href="https://google.com" />
</template>
<script lang="ts" setup>
import { EmbedFbCmt } from "embed-fbcmt-client/vue"
</script>
function useEmbedSize(
el: HTMLIFrameElement | Ref<HTMLIFrameElement | undefined> | undefined
): {
width: Ref<number>
height: Ref<number>
}
function useEmbedHeight(
el: HTMLIFrameElement | Ref<HTMLIFrameElement | undefined> | undefined
): Ref<number>
FAQs
client package for embed-fbcmt
We found that embed-fbcmt-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.