
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
============
ASSUMPTION: This repository is a sample of this repository tested with RiotJS v6.
A Simplistic Central Event Controller / Dispatcher For RiotJS, Inspired By Facebook's Flux Architecture Pattern. In addition, this library supports RiotControl for version 6.
Riox is, in the spirit of Riot itself, extremely lightweight. It forgoes elements of Flux, to favor small and simple applications. Riox passes events from views to stores, and back, relying heavily on Riot's observerable API. Stores can talk to many views, and views can talk to many stores.
Given the following:
Possible data flow:
This encourages loosely coupled components. Stores house application logic and domain-specific data. Views comprise the user interface. Either side can be swapped out without interfering with the other. For example, a store that saves to local storage can be easily swapped for one that saves to a back-end service instead.
Reference demo/todostore.js and todo.tag to understand how this works.
Reference routing_demo/index.html, itemstore.js, and item-app.tag
RiotJS version of the flux-comparison catalog.
Map of all movies in a given location.
Requires Riot 6.0+
Include riox.js, or it's few lines of code, in your project.
$ npm install riox
Register the store in central dispatch, where store is a observable()
method of @riotjs/observable
. Generally, all stores should be created and registered before the Riot app is mounted.
// Base usage
riox.addStore(store)
// Example, at start of any components:
import MyStore from './path/to/store/dir/my-store'
import riox from 'riox'
onBeforeMount(props, state) {
// Create store instance
const myStore = new MyStore()
// Register the store in central dispatch.
riox.addStore(myStore)
}
Trigger event on all stores registered in central dispatch. Essentially, a 'broadcast' version of Riot's el.trigger()
API.
riox.trigger(event)
riox.trigger(event, arg1 ... argN)
// Example, inside Riot view (tag):
riox.trigger('todo_add', { title: self.text })
Listen for event, and execute callback when it is triggered. This applies to all stores registered, so that you may receive the same event from multiple sources.
riox.on(event, callback)
// Example, inside Riot view (tag):
riox.on('todos_changed', (items) => {
self.items = items
self.update()
})
Remove event listener.
riox.off(event)
riox.off(event, callback)
I'm waiting for you at any time, including code reviews, bug reports, feature additions, questions and more!
FAQs
Event Controller / Dispatcher For RiotJS, Inspired By Flux and RiotControl
The npm package riox receives a total of 1 weekly downloads. As such, riox popularity was classified as not popular.
We found that riox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.