
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
fingerprint-oss
Advanced tools
fingerprint-oss is a javascript util designed to collect various information about the user's device, location, and network.
A free and open source fingerprinting services unlike FingerprintJS.
Fingerprint OSS is a fork of user-info-logger, a simple client-side fingerprinting library that logs user information. Unlike commercial alternatives that are "source available" but not truly open, Fingerprint OSS is released under the GPL-3.0 license, making it fully open source and free to use.
Install via npm:
npm install fingerprint-oss@latest
Basic usage:
const { userInfo } = require('fingerprint-oss');
const data = await userInfo();
const config = {
transparancy: true,
message: 'Test Message',
}
const data = userInfo(config);
The userInfo()
function returns an object containing various data points about the user's browser, system, and environment, which can be used for:
Fingerprint OSS can collect information about:
You can see a live demo of Fingerprint OSS in action here.
This project is currently under active development.
GPL-3.0 - See LICENSE file for details.
Contributions are welcome! Please feel free to submit a Pull Request or open issues on our GitHub repository.
This project is a fork of user-info-logger, with enhancements and improvements for better performance and features.
FAQs
A comprehensive JavaScript library for device fingerprinting and system information collection. Provides robust, deterministic fingerprinting for web applications with privacy-conscious design.
The npm package fingerprint-oss receives a total of 21 weekly downloads. As such, fingerprint-oss popularity was classified as not popular.
We found that fingerprint-oss demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.