Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Mousetrap is a simple library for handling keyboard shortcuts in Javascript. It allows you to bind key combinations to specific functions, making it easier to create keyboard-driven interfaces.
Binding a single key
This feature allows you to bind a single key to a function. In this example, pressing the 'A' key will trigger an alert.
Mousetrap.bind('a', function() { alert('You pressed A!'); });
Binding a combination of keys
This feature allows you to bind a combination of keys to a function. In this example, pressing 'Ctrl+S' will trigger an alert and prevent the default browser action.
Mousetrap.bind('ctrl+s', function(e) { e.preventDefault(); alert('You pressed Ctrl+S!'); });
Binding sequences of keys
This feature allows you to bind sequences of keys to a function. In this example, pressing 'G' followed by 'I' will trigger an alert.
Mousetrap.bind('g i', function() { alert('You pressed G then I!'); });
Binding keys in a specific context
This feature allows you to bind keys in a specific context, such as 'keydown', 'keyup', or 'keypress'. In this example, pressing 'Command/Control+Enter' will trigger an alert on the 'keydown' event.
Mousetrap.bind('mod+enter', function() { alert('You pressed Command/Control+Enter!'); }, 'keydown');
Unbinding keys
This feature allows you to unbind a previously bound key. In this example, the 'A' key will no longer trigger any function.
Mousetrap.unbind('a');
Keymaster is a simple micro-library for defining and dispatching keyboard shortcuts. It is similar to Mousetrap in that it allows you to bind key combinations to functions, but it is more lightweight and has a simpler API.
Hotkeys-js is a robust library for handling keyboard shortcuts. It offers more features than Mousetrap, such as support for key sequences and key scopes, making it a more versatile option for complex applications.
KeyboardJS is a library for handling keyboard input. It provides a more comprehensive set of features compared to Mousetrap, including support for key sequences, key combos, and key states, making it suitable for more advanced use cases.
Mousetrap is a simple library for handling keyboard shortcuts in Javascript.
It is licensed under the Apache 2.0 license.
It is around 2kb minified and gzipped and 4.5kb minified, has no external dependencies, and has been tested in the following browsers:
It has support for keypress
, keydown
, and keyup
events on specific keys, keyboard combinations, or key sequences.
Include mousetrap on your page before the closing </body>
tag
<script src="/path/to/mousetrap.min.js"></script>
or install mousetrap
from npm
and require it
var Mousetrap = require('mousetrap');
Add some keyboard events to listen for
<script>
// single keys
Mousetrap.bind('4', function() { console.log('4'); });
Mousetrap.bind("?", function() { console.log('show shortcuts!'); });
Mousetrap.bind('esc', function() { console.log('escape'); }, 'keyup');
// combinations
Mousetrap.bind('command+shift+k', function() { console.log('command shift k'); });
// map multiple combinations to the same callback
Mousetrap.bind(['command+k', 'ctrl+k'], function() {
console.log('command k or control k');
// return false to prevent default browser behavior
// and stop event from bubbling
return false;
});
// gmail style sequences
Mousetrap.bind('g i', function() { console.log('go to inbox'); });
Mousetrap.bind('* a', function() { console.log('select all'); });
// konami code!
Mousetrap.bind('up up down down left right left right b a enter', function() {
console.log('konami code');
});
</script>
There are a number of other similar libraries out there so what makes this one different?
keydown
events (You can specify keypress
, keydown
, or keyup
or let Mousetrap choose for you).?
or *
without having to specify shift+/
or shift+8
which are not consistent across all keyboardstrigger()
methodUnit tests are run with mocha.
View it online to check your browser compatibility. You may also download the repo and open tests/mousetrap.html
in your browser.
Install development dependencies
cd /path/to/repo
npm install
Run tests
npm test
Full documentation can be found at https://craig.is/killing/mice
FAQs
Simple library for handling keyboard shortcuts
The npm package mousetrap receives a total of 403,416 weekly downloads. As such, mousetrap popularity was classified as popular.
We found that mousetrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.