
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
The Customer Data Platform for Developers
Website · Documentation · Community Slack
RudderStack Javascript SDK for browsers.
For detailed documentation on the RudderStack JavaScript SDK, click here.
To install the package via npm, run the following command:
npm install @rudderstack/analytics-js --save
Note that this NPM module is only meant to be used for a browser installation. If you want to integrate RudderStack with your Node.js application, refer to the RudderStack Node.js repository.
Default export will fetch the plugins during runtime as federated modules in separate requests.
import { RudderAnalytics } from '@rudderstack/analytics-js';
const analytics = new RudderAnalytics();
analytics.load(<WRITE_KEY>, <DATA_PLANE_URL>);
window.rudderanalytics = analytics;
Bundled export will contain the plugins code as part of the bundle in build time.
import { RudderAnalytics } from '@rudderstack/analytics-js/bundled';
const analytics = new RudderAnalytics();
analytics.load(<WRITE_KEY>, <DATA_PLANE_URL>);
window.rudderanalytics = analytics;
Legacy export will contain the plugins code as part of the bundle in build time and support legacy browsers like IE11.
import { RudderAnalytics } from '@rudderstack/analytics-js/legacy';
const analytics = new RudderAnalytics();
analytics.load(<WRITE_KEY>, <DATA_PLANE_URL>);
window.rudderanalytics = analytics;
Look for run scripts in the package.json
file for getting the browser minified and non-minified builds. The builds are
updated in the dist
folder of the directory. Among the others, some of the important ones are:
npm run build:browser:modern
: This outputs dist/cdn/modern folder that contains the cdn package contents.npm run build:npm
: This outputs dist/npm folder that contains the npm package contents.RudderStack JS SDK can be used in Chrome Extensions with manifest v3, both as a content script (via the JavaScript SDK package) or as a background script service worker (via the service worker package).
For examples and specific details look into Chrome Extensions Usage
RudderStack JS SDK service worker can be used in serverless runtimes like Cloudflare Workers or Vercel Edge functions.
For examples and specific details look into:
FAQs
Monorepo accommodating Rudderstack Analytics JS SDK
The npm package iureiure receives a total of 0 weekly downloads. As such, iureiure popularity was classified as not popular.
We found that iureiure demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.