Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
overlooker
Advanced tools
npm i overlooker
const { profile, compare, check } = require('overlooker');
const start = async () => {
const actions = [{
name: 'test-action',
action: async (page) => {
await page.click('.button');
await page.waitForSelector('.new-content');
}
}];
const dataStaging = await profile({
pages: [{
name: 'main',
url: 'https://staging.example.com',
heroElement: '.hero-element',
actions
}]
});
const dataFeature = await profile({
pages: [{
name: 'main',
url: 'https://feature.example.com',
heroElement: '.hero-element',
actions
}]
});
const compared = compare(dataStaging, dataFeature);
const checked = check(compared, {
'percent.stats.timings.firstPaint.median': 0.05
});
};
start();
/**
* @param {Object} config
* @param {Object[]} config.pages - an array of page objects for the profile
* @param {string} config.pages.$.name - page name
* @param {string} config.pages.$.url - page url
* @param {string} config.pages.$.heroElement - page hero element selector for checking paint time
* @param {Object[]} [config.pages.$.cookies] - cookies objects for page
* @param {Object[]} [config.pages.$.actions] - array of actions that are executed after the onLoad event
* @param {Function} [config.pages.$.actions.$.action] - the function receives an instance of the page in arguments and should return a promise
* @param {string} [config.pages.$.actions.$.name] - action name
* @param {Object} [config.throttling] - throttling object
* @param {number} [config.throttling.cpu] - cpu throttling (higher - worst)
* @param {string} [config.throttling.network] - network throttling (GPRS|Regular2G|Good2G|Regular3G|Good3G|Regular4G|DSL|WiFi)
* @param {number} [config.count] - the number of measurements for each page
* @param {number} [config.threads] - the number of browser instances for profiling (higher - measurement will be faster, but less accurate)
* @param {string} [config.platform] - platform for profile (desktop|mobile)
* @param {string} [config.browserArgs] - browser arguments
* @param {string} [config.firstEvent] - an name of event from which to count time (default: responseEnd)
* @param {Function} [config.logger] - logger function
* @param {object} [config.proxy] - proxy configuration
* @param {string} [config.proxy.address] - address and port of the proxy (localhost:3128)
* @param {Function} [config.proxy.restart] - function for restarting external proxy service
* @param {Object} [config.buildData] - config for requesting build data for chunks meta info
* @param {string} [config.buildData.url] - url of build data
* @param {Function} [config.buildData.getter] - getter for requesting build data
* @param {Object[]} [config.cookies] - main cookies objects
* @param {string} [config.cookies.$.name] - cookie name
* @param {string} [config.cookies.$.value] - cookie value
* @param {string} [config.cookies.$.domain] - cookie domain
* @param {Object} [config.requests] - object for manipulate network requests
* @param {string|RegExp|Function|Array} [config.requests.ignore] - for ignore requests
* @param {string|RegExp|Function|Array} [config.requests.merge] - for merge requests while aggregation
* @param {string|RegExp|Function|Array} [config.requests.internalTest] - mark each request as internal / external
* */
FAQs
tool for profile front-end performance
The npm package overlooker receives a total of 2 weekly downloads. As such, overlooker popularity was classified as not popular.
We found that overlooker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.