Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
phaser-unofficial
Advanced tools
phaser
which is now compatible with NPM and Browserify.Phaser is a pretty cool engine for making games in the browser, but unfortunately the original repo doesn't play to nice with NPM and, by extension, Browserify. Until the official package decides to support NPM you can use this (when this happens, raise an issue and we'll have this unpublished on npm in no time).
This is the most fat free version of Phaser, the version with no other libraries. Modules should be small, so if you want any of the plugins you'll have to inject those separately.
npm install phaser-unofficial --save
var Phaser = require('phaser-unofficial');
Versions of this package are kept in sync with the versions of Phaser so this layer can be as transparent as possible.
Phaser is pulled in through Bower and copied into place using Gulp.
Install Bower and Gulp:
npm install -g bower
npm install -g gulp
Install project dependancies:
cd /path/to/project/root
npm install
Install latest package version
cd /path/to/project/root
bower install phaser --force-latest
Copy the files into place
cd /path/to/project/root
gulp
Phaser is released under the MIT License.
FAQs
NPM version of the Phaser game engine
The npm package phaser-unofficial receives a total of 0 weekly downloads. As such, phaser-unofficial popularity was classified as not popular.
We found that phaser-unofficial demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.