
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
ember-connection-aware-media
Advanced tools
An Ember Connection-Aware Media Component addon using the Network Information API.
This addon gives you a component "ca-media" which is a network connection-aware component by making use of the latest Network Information API provided by the browser. At present, Chrome is the only browser that supports this api.
Based on the effective connection type, this component serves different media resources like below:
There is also a blog post here defining how the component is created from scratch and how it works.
Please find the demo for this addon here which works only in Chrome.
To render the component in your templates,
{{ca-media
highResImage=highResImage
lowResImage=lowResImage
oggVideo=oggVideo
webmVideo=webmVideo
alt="Tomster The Ember Mascot"
autoUpdate=true
}}
To provide different media sources to the component either using a parent component, route or a controller.
import Controller from '@ember/controller';
export default Controller.extend({
lowResImage: 'https://raw.githubusercontent.com/rajasegar/connection-aware-ember/master/public/assets/img/Tomster-Logo-lowRes.png',
highResImage: 'https://raw.githubusercontent.com/rajasegar/connection-aware-ember/master/public/assets/img/Tomster-Logo.png',
oggVideo: 'http://download.blender.org/peach/trailer/trailer_400p.ogg',
webmVideo: 'http://dl3.webmfiles.org/big-buck-bunny_trailer.webm',
});
ember install ember-connection-aware-mediaember servenpm test (Runs ember try:each to test your addon against multiple Ember versions)ember testember test --serverember buildFor more information on using ember-cli, visit https://ember-cli.com/.
FAQs
An Ember Connection-Aware Media Component addon using the Network Information API.
The npm package ember-connection-aware-media receives a total of 11 weekly downloads. As such, ember-connection-aware-media popularity was classified as not popular.
We found that ember-connection-aware-media demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.