Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
rescript-push
Advanced tools
This package closely wraps the [Push API](https://developer.mozilla.org/en-US/docs/Web/API/Push_API). It does not include the Push API Service Worker Additions. Instead, it is a dependency of the `rescript-service-worker` package. It has not been exhaust
This package closely wraps the
Push API.
It does not include the Push API Service Worker Additions. Instead,
it is a dependency of the rescript-service-worker
package. It has not been
exhaustively tested.
This package is currently supported but may go long periods of time without fresh commits because it is something like "finished". Yes, software is like fashion, and fashion is never finished, and I will try to upgrade the ReScript language version from time to time, but unless there are significant defects in this project you can generally consider this project to be as stable as the ReScript language and the Push API.
This is to say: Don't be alarmed by the lack of recent commits! Stability is good! And don't be afraid to open issues.
npm i rescript-push
'data
is a frequent type parameter. It represents the untyped data object
passed into the eventInitDict of the PushEvent constructor.
There's currently no ReScript Blob
type binding that I'm aware of, so
rather than find a workaround, I'm just leaving that one as an exercise for
the reader.
Because I have merely translated the API from the JavaScript specification into ReScript with no implementation, I do not consider anything in this repository to be copyrightable.
As a courtesy, I have included a copy of the MIT license anyway just in case your lawyers are fussy about this sort of thing. If you'd rather have a different license instead or in addition to it, let me know and I'll write one for you.
FAQs
This package closely wraps the [Push API](https://developer.mozilla.org/en-US/docs/Web/API/Push_API). It does not include the Push API Service Worker Additions. Instead, it is a dependency of the `rescript-service-worker` package. It has not been exhaust
We found that rescript-push demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.