
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
pyrsmk-rip
Advanced tools
RIP (REST in peace) is a tool for sending synchroneous REST requests by generating a hidden FORM
on-the-fly. It's really useful when developing with frameworks like Slim or Lumy without using synchroneous ajax requests : it just send data like a normal FORM
would do.
You can pick the minified library or install it with :
npm install pyrsmk-rip
bower install rip
RIP handles basic POST
, PUT
and DELETE
requests, but can manage other manual request types.
// API
RIP.POST(<url>, [data]);
RIP.PUT(<url>, [data]);
RIP.DELETE(<url>, [data]);
RIP.map(<type>, <url>, [data]);
// Simple example
RIP.POST('/url');
// Data example
RIP.PUT('/newclient', {
firstname : 'Foo',
lastname : 'Bar',
age : 27,
children : [
'Audrey',
'Nicholas',
'Alison'
]
});
// Map example
RIP.map('REQUEST_TYPE', '/someurl', {
foo: 'bar'
});
If you pass a boolean value into the data parameter, the value will be considered as a checkbox and will return on
or `` to your remote script.
Please note that requests are using _METHOD
POST data attribute, as used in Slim and Lumy. But if you need to change the name of this attribute to __REQUEST__
(per example), you can do this:
RIP.setRequestAttributeName('__REQUEST__');
Published under the MIT license.
FAQs
REST in peace
The npm package pyrsmk-rip receives a total of 17 weekly downloads. As such, pyrsmk-rip popularity was classified as not popular.
We found that pyrsmk-rip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.