
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
jquery.tap is a tap listener for jquery. Rather than waiting for the slow `click` listener to trigger on touch devices, it listens to touch events and triggers immediately after the touch finishes. The click event usually takes a few hundred milliseconds
jquery.tap is a tap listener for jquery. Rather than waiting for the slow
click listener to trigger on touch devices, it listens to touch events and
triggers immediately after the touch finishes. The click event usually takes
a few hundred milliseconds after this before triggering, which is a noticable
delay.
<script src="jquery.tap.js"></script>
<script>
$(".tappable").tap(function() {
console.log("Tappable was tapped!");
});
</script>
If the browser the page is being viewed in does not support touches, the tap function will delegate to the regular click listener. This makes it suitable for responsive design.
A tap is qualified by a user touching the screen and then releasing the touch without moving beyond a certain threshold. For example, if the touch moves 20 pixels, it may be considered as a drag, so the tap event will not fire. You can manually specify this threshold in the tap event function:
$(".tappable").tap(50, function() {
// will be triggered as long as the touch is not dragged more than 50 pixels
});
Other events you can listen for that are triggered by the tap listener include:
tap-failed - triggered when a touch is cancelled, or when a touch is
released after dragging beyond the threshold.exceed-tap-threshold - triggered immediately as the tap exceeds the
threshold between tap and drag.FAQs
jquery.tap is a tap listener for jquery. Rather than waiting for the slow `click` listener to trigger on touch devices, it listens to touch events and triggers immediately after the touch finishes. The click event usually takes a few hundred milliseconds
We found that jquery-tap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.