
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
floating-ball
Advanced tools
import FloatingBall from "floating-ball";
const floatingBall = new FloatingBall({
panelEvents: [
{
actionType: "text",
actionText: "负责人:张老师\n1560000111",
},
{
actionType: "link",
actionText: "校园智能助手",
actionLink: "https://yiyan.baidu.com/welcome",
},
],
});
// 可在页面销毁时调用一下方法移除悬浮球
floatingBall.removeFloatingBall();
| 入参 | 是否必填 | 描述 | 类型 |
|---|---|---|---|
| icon | 否 | 悬浮球图标 | string |
| bottom | 否 | 悬浮球距离底部偏移量 | number |
| right | 否 | 悬浮球距离右侧偏移量 | number |
| scrollEl | 否 | 页面滚动元素 | HTMLElement |
| width | 否 | 浮球宽度 | number |
| height | 否 | 浮球高度 | number |
| panelEvents | 否 | 悬浮球面板详情(不传则不会显示面板) | Array |
| 入参 | 是否必填 | 描述 | 类型 |
|---|---|---|---|
| actionType | 是 | 面板元素类型 | "link" 或 "text" |
| actionLink | actionType 为 link 时必填 | 面板元素跳转链接 | string |
| actionText | 是 | 面板元素文案 | string |
<script src="https:XXXXX/index.umd.js"></script>
<script>
const floatingBall = new window.floatingBall({
panelEvents: [
{
actionType: "text",
actionText: "负责人:张老师\n1560000111"
},
{
actionType: "link",
actionText: "校园智能助手",
actionLink: "https://yiyan.baidu.com/welcome"
}
]})
</script>
import FloatingBall from "@/utils/floating-ball";
const floatingBall = new FloatingBall({
panelEvents: [
{
actionType: "text",
actionText: "负责人:张老师\n1560000111",
},
{
actionType: "link",
actionText: "校园智能助手",
actionLink: "https://yiyan.baidu.com/welcome",
},
],
});
FAQs
#### 方式 1 npm i floating-ball
We found that floating-ball demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.