Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
ep_author_hover
Advanced tools
Adds author names to span titles (shows on hover), works as authors change their name. Hover includes author color and fast switching between author spans. Hat tip to Martyn York for the initial work on this.
Hover over an author to see their name
Shows the author color on hover Supports fast switching between hovers (Doesn't depend on native browser support)
This plugin adds a new switch called Show Author on Hover to the settings menu. This allows you to disable/enable the display of author names on hover in your browser.
To don't show the author names on hover by default (the user has to activate in manually), add the following to your setting.json
:
// disable author hover by default
"ep_author_hover": {
"disabledByDefault": true
}
I don't really like plugins that depdend on manipulating the ACE inner DOM, rewriting this plugin and using events meant I could still have hover functionality without the risk of running into nasty ACE issues down the line. It also meant that as new authors joined and updated their name I could update hte hovers in real time. Previous attempts at writing this plugin have required a browser refresh to know who authors are, that wasn't good enough for me.
FAQs
Adds author names to span titles (shows on hover), works as authors change their name. Hover includes author color and fast switching between author spans. Hat tip to Martyn York for the initial work on this.
The npm package ep_author_hover receives a total of 303 weekly downloads. As such, ep_author_hover popularity was classified as not popular.
We found that ep_author_hover demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.