Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
quantifai-editorjs-shortcuts
Advanced tools
CodeX shortcuts is a micro-library for dispatching keyboard shortcuts in Javascript. You don't need external dependencies.
Package is available on NPM
npm install @codexteam/shortcuts --save
Require module if you use Webpack or ES6
const Shortcut = require('@codexteam/shortcuts');
or
import Shortcut from '@codexteam/shortcuts'
library provided as class, so to create a new shortcut, make a Shortcut
instance with specified options.
Example:
let cmdA = new Shortcut({
name : 'CMD+A',
on : document.body,
callback: function(event) {
// your handler
}
});
name
- this is shortcut name, keys must be separated by +
on
- binding element. Shortcut will be fired only on passed (this) element
callback
- you code that defines the behaviour
If you have a single-page web application and you don't need shortcuts handler you can easily remove it
cmdA.remove();
Library parses data given on constructor, defines commands and keys.
Supported commands : shift
, cmd
, command
, ctrl
,
control
, windows
, alt
.
other words we pass as keys and special commands. Special commands are:
backspace
, enter
, right
, left
, up
, down
,
escape
, insert
, delete
.
To contribute, please fork, add your patch and tests for it (in the test/ folder) and submit a pull request.
CodeX is a team united of passionate people who loves web development, design and marketing.
We build a full-valued projects on the world area.
Feel free to give us a feedback team@ifmo.su
Follow us on:
Telegram: https://t.me/codex_team
Instagram: https://www.instagram.com/codex_team
FAQs
Library for handling keyboard shortcuts
The npm package quantifai-editorjs-shortcuts receives a total of 2 weekly downloads. As such, quantifai-editorjs-shortcuts popularity was classified as not popular.
We found that quantifai-editorjs-shortcuts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.