
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
message-await
Advanced tools
A utility to print message with an async success or failure in node.js
npm install message-await
It's a really simple way of giving your user feedback that we are waiting for something and then to give feedback on success or failure:
import print from 'message-await';
const messageAwait = print('Loading the thing', true, chalk.blue);
await someAsyncProcess;
messageAwait.success('The thing loaded');
import print from 'message-await';
const messageAwait = print('Loading the thing', true, chalk.blue);
await someAsyncProcess;
messageAwait.success("optional complete message");
// OR: messageAwait.fail("optional fail message");
// OR: messageAwait.complete(true, "optional message")
// OR: messageAwait.complete(false)
import print from '../src';
import chalk from 'chalk';
const messageAwait = print('Loading', true, chalk.blue);
function onProgressCallback(complete: number, total: number){
messageAwait.updateMessage(`Loading ${complete}/${total}`);
}
function onCompleteCallback(total: number){
messageAwait.success(`Loading ${complete}/${total}`);
}
someAsyncFunction(onProgressCallback, onCompleteCallback);
const result = await print('Waiting', true, chalk.blue).await(examplePromise, true, true, 'Done', 'Fail');
The above example exits the process and prints the error message when the promise is rejected:
FAQs
A utility to print message with an async success or failure in node.js
We found that message-await demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.