
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
jquery-powerbi
Advanced tools
JQuery plugin which wraps the PowerBI-Javascript library and accepts configuration object directly. This makes embedding Power BI visuals similar to using other jQuery plugins.
For a demonstration of this library see the sample: powerbi-sample-client-jquery (COMING SOON!)
Install via NPM:
npm install --save jquery-powerbi
Install via Bower:
bower install --save jquery-powerbi
<script src="powerbi.js"></script>
<script src="jquery.js"></script>
<script src="jquery.powerbi.js"></script>
Note: You can find out more about powerbi.js from the PowerBI-JavaScript repository.
Index.html
<div id="reportContainer"></div>
App.js
$(() => {
var $reportContainer = $('#reportContainer');
var reportUrl = 'http://powerbipaasapi.azurewebsites.net/api/reports/63f50faa-f1fe-40ed-ab33-67fb09b80251';
fetch(reportUrl)
.then(response => response.json())
.then(report => {
var reportConfig = $.extend({ type: 'report' }, report);
$reportContainer.powerbi(reportConfig);
});
});
Note the object that you pass to the powerbi plugin function must have the following properties but there may be more:
{
"type": "report",
"accessToken": "eyJ0eXA...<removed>...D8MFM",
"embedUrl": "https://embedded.powerbi.com/appTokenReportEmbed?reportId=5dac7a4a-4452-46b3-99f6-a25915e0fe55"
}
Note: The type
property which indicates the type of the object you are embedding. In this case it we are embedding a report so the type is 'report'.
There are other options that can be passed such as filterPaneEnabled
, see the PowerBI-JavaScript repository for more information.
FAQs
PowerBi plugin for jQuery.
The npm package jquery-powerbi receives a total of 94 weekly downloads. As such, jquery-powerbi popularity was classified as not popular.
We found that jquery-powerbi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.