
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
events4js is a javascript events framework
designed for require() usage
write by @waxzce
examples and test avaible into the tests directory
API doc is generated by yuidoc into docs/output/pathjs_docs/index.html
build directory contain usable build
feel free to contribute, comment or ask :-)
Under MIT licence
The goal of events4js is give the possibility of produce events from any object.
Create an EventProducer :
var MyClass = (function () { var e4js = require('events4js');
Some_Event_Producer = function () {
this.initialize();
}
var p = Some_Event_Producer.prototype = new e4js.EventProducer();
p.initialize_event = p.initialize;
p.initialize = function () {
this.initialize_event();
}
return Some_Event_Producer;
})();
Some tricks : => autoLaunch The autolaunch is a way to fire an event after another. For example fire "end" after "success" or "error" Just give some config to the initialize_envent method :
this.initialize_event({ autoLaunch: { 'end': ['success', 'error'] } });
=> waitFor The wait for allow to fire an event after a list of events fire. For example fire "tree" if "one" and "two" have been fire. Just give some config to the initialize_envent method :
this.initialize_event({ waitFor: { 'tree': ['two', 'one'], 'l': ['m', 'n'] } });
Other examples in the tests directory
FAQs
Events management library for javascript
We found that events4js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.