
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Lava Lamp is a JavaScript plugin for menus. It creates a div that moves when you hover over an element, giving it an elastic animation.
Description: A JavaScript animation plugin for menus. It creates a div that moves when you mouse over an element, giving it an elastic animation.
Author: Richard Hung
More documentation and examples: https://richard1320.github.io/Lava-Lamp/
Link Files
Lava Lamp has a .js and .css file. All its animations are done with CSS3 transitions, so you can use or modify the advanced transition-timing-function to create custom easing.
<!-- Include the stylesheet -->
<link type="text/css" href="build/css/lavalamp.css" rel="stylesheet" media="screen"/>
<!-- Include the lava lamp plugin -->
<script type="text/javascript" src="build/js/lavalamp.js"></script>
Create HTML
Create a container for the slider and children for the panels. Remember to add a default active element.
<ul id="navlist">
<li class="active"><a href="/">Home</a></li>
<li><a href="/about.html">About</a></li>
<li><a href="/services.html">Services</a></li>
<li><a href="/programs.html">Programs</a></li>
<li><a href="/contact.html">Contact</a></li>
</ul>
Call the plugin
Call the lava lamp plugin after the HTML markup.
const settings = {
margins: true,
};
const element = document.getElementById("navlist");
const lavalampInstance = new Lavalamp(element, settings);
Style it
The plugin creates a div with the lavalamp__object
class in the container. This object stretches with the width and
height of the element that you're hovering over.
.lavalamp__object {
box-shadow: 0 0 5px 0 #999 inset;
}
FAQs
Lava Lamp is a JavaScript plugin for menus. It creates a div that moves when you hover over an element, giving it an elastic animation.
The npm package lavalamp receives a total of 141 weekly downloads. As such, lavalamp popularity was classified as not popular.
We found that lavalamp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.