
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
flow-launcher-helper
Advanced tools
A simple library to help build plugins for Flow Launcher with Javascript or Typescript
npm install flow-launcher-helper
I recommend you read the Flow docs before writing your plugin. This example is based on their example.
import flow from 'flow-launcher-helper';
const { params, on, showResult, run } = flow();
on('query', () => {
showResult({
title: 'Hello World Typescript',
subtitle: `Showing your query parameters: ${params}. Click to open Flow's website`,
method: 'do_something_for_query',
params: ['https://github.com/Flow-Launcher/Flow.Launcher'],
iconPath: 'Images\\app.png',
});
});
on('do_something_for_query', () => {
const url = params;
open(url);
});
run();
flow()
defaultIconPath
— string (optional)
: the default icon path that will be sent to Flow, so you don't need to specify everytime in the showResult
function.method
— string
: current method.params
— string
: current parameters.on
— function
: receives a method (string) and a callback function that will be executed when the method matches the current method.showResult
— function
: receives an array of results, where you specify the title, subtitle, method, params and icon path, and logs the data to be displayed in Flow.run
— function
: runs the current method. You should call this function at the end of your script, or after all the on
functions have been called.FAQs
A simple lib to help build plugins for Flow Launcher
We found that flow-launcher-helper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.