Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
js-address-autofill
Advanced tools
An ES6 Module using the Google Places Autocomplete API for address completion in forms.
A Javascript using the Google Places Autocomplete API for address completion in forms.
This section will follow soon, after I've accomplished all tests.
The demo is a simple single website that runs the script for tryouts. It can be set up in short time.
This setup also works for development since the webpack's filewatcher is activated as well.
Create a new file: ´./demo/config.json´ and add your Google Maps API like this:
{
"apiKey": "YOUR_API_KEY_HERE"
}
This will setup the key for your demo environment.
It's also possible to pass the API key within the options directly.
npm start
This should start the server immediately and open up a new browser tab with the demo page.
If not so, there might be a problem with the port configuration. The demo/dev server is configured for Port 9000 on localhost: http://localhost:9000/
To change this setting look in the webpack.config.js
at the property: devServer
.
Following commands are supported by the build system:
npm start // Starts the Devserver
npm run watch // Starts the file watcher for development
npm run prod // Bundles the minified javascript and source maps
npm run dev // Bundles the unminified javascript and source maps
npm run build // Runs lint, test, dev and prod mode at once (to prepare releases)
npm run test // Runs jest testrunner
npm run lint // Runs eslint on source files
FAQs
An ES6 Module using the Google Places Autocomplete API for address completion in forms.
The npm package js-address-autofill receives a total of 1 weekly downloads. As such, js-address-autofill popularity was classified as not popular.
We found that js-address-autofill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.