
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
ripple-emulator
Advanced tools
A browser based, platform agnostic mobile application development and testing tool.
If you plan to dive into the source, be sure to check out the HACKING file.
To get started, you need to setup a few things, first- run (in the project root):
./configure
This script will pull down the needed npm packages and initialize the submodules.
jake
This will build ripple to the pkg/
folder. In that folder there are various targets that can be used.
jake -T
This will describe all the available commands for building and running the tests, etc.
Ripple is (by-design) browser agnostic, and should be able to run inside any web browser.
If you want to run it inside other browsers, you will need to use the pkg/hosted
target, paired with the CLI's emulate
command.
Ex (using the NPM package):
ripple emulate --path to/my/app
# or
ripple emulate --remote http://remote-site.com
Then navigating to (your app's html file):
http://localhost:PORT/index.html?enableripple=true
There is a command line interface that can be paired with the client (UI).
It can be used for various things, such as statically hosting an application, and running a local (cross origin) XHR proxy.
To install:
npm install -g ripple-emulator
This will install a global script called ripple
. To see usage, run:
ripple help
The master
branch is the latest (stable) release. The next
branch is where all development happens.
If you like the project, and want to contribute code, please issue a pull request (on GitHub) into the next
branch.
Note: You will need to submit an Apache ICLA (Individual Contributor License Agreement) for your contribution to be accepted.
jake lint
, no new lint errors introduced.FAQs
A browser based html5 mobile application development and testing tool
The npm package ripple-emulator receives a total of 139 weekly downloads. As such, ripple-emulator popularity was classified as not popular.
We found that ripple-emulator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.