
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
front_screenshot
Advanced tools
Mini library, with no dependencies, to output PNGs from maps and reports (or anything in the DOM)
This library bundles
Into an library with no dependencies, that can transform SVG elements into images or Canvas elements, and take screenshots of your page or sections of it, even if they are hidden due to CSS properties such as overlay scroll, hidden or auto.
Basically, because chart libraries such as C3.js can style SVG elements with rotation and other transformations that HTML2Canvas cannot parse. So I combined its features with the ones on Canvg to preprocess a given container, transforming each SVG element into an image, then capturing the screenshot, then restoring the original SVG.
Some additions and removal of properties, attributes and classnames where cumbersome to add using native document.querySelectorAll
methods, so
I also bundled Cash.js, a minimal jQuery alternative that provides just what's needed to manipulate DOM nodes.
See the online example at: https://huasofoundries.github.io/front_screenshot/
Or, you can also clone this repo, run make install
, then make run
from its root and navigate to http://localhost:5000
.
git clone https://github.com/HuasoFoundries/front_screenshot.git
cd front_screenshot
make install
make run
See USAGE.md
Install it with
npm install front_screenshot
or, if you're using JSPM:
jspm install front_screenshot=npm:front_screenshot
jspm install front_screenshot=github:HuasoFroundries/front_screenshot
FAQs
Mini library, with no dependencies, to output PNGs from maps and reports (or anything in the DOM)
We found that front_screenshot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.