
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Rockcss is a command line tool built to find image-based differences between website updates. Base on Succss.
##ROCKCSS - base on SUCCSS, a CSS Regression testing tool
Customized & optimized from SUCCSS (Find more: http://succss.ifzenelse.net)
###Install
#####$ sudo npm install -g rockcss
###Support
###How to use? Add reference screenshots
#####$ rockcss add your-test.js
After you change something in js/css code and complete your task. Let tun test again and check:
#####$ rockcss check your-test.js
If you want see a visual report:
Copy report.js
and report folder
inside /report_server
to your folder have file your-test.js
and run command:
#####$ node report.js -t 60
-t 60
is time of server will alive in 60 mins. Default is 15 mins. After this time, server will automating shutdown. But you can start it again, it's not delete last checking data.
Open web browser at one of address in command line and see result. One of default address maybe:
http://localhost:3000/
###How to config (make your-test.js)
Check document from Sucss: http://succss.ifzenelse.net
New configs:
Under Succss.pages['name-page']:
1. `hidden` - String css3 of hidden Element.
2. `beforeTest(url)` - Function: with `url` is variable of url of this page.
Under Succss.page['name-page'].captures:
1. `before` - Function: call before capture.
2. `sAfter` - Function: call after captured.
Example:
Succss.pages = {
'home': {
url: 'http://google.com/',
directory: 'screenshots/' + 'home',
hidden: '#ydtb-toolbar', //Hide Yii debug toolbar
beforeTest: function() {
var me = this;
me.click({
type: 'xpath',
path: '//*[contains(concat(" ", @class, " "), " sidebar__list ")]//a[2]'
});
},
captures: {
'header': {
selector: '.header.header-new'
},
'popup-login': {
selector: {
type: 'xpath',
path: "//*[@id='fb-connect-popup']/../..",
},
before: function() {
var me = this;
me.click('.header-authentication-popup[data-authen="0"]');
me.wait(3000);
},
sAfter: function() {
var me = this;
me.click('.nyroModalClose.nyroModalCloseButton');
me.wait(1000);
}
},
'checkout': {
selector: 'body',
before: function() {
var me = this;
me.evaluate(function() {
var input = $('#usernotregister').find('input');
input[0].checked = true;
input.change();
});
me.wait(100);
me.sendKeys('#EmailLoginForm_email', Config.emailLogin); // Fill your email address to login
me.sendKeys('#EmailLoginForm_password', Config.passwordLogin); // Fill your password to login
me.click('button.submit_btn.login_btn');
me.wait(5000);
me.waitForSelector('#page', function() {
console.log('Open checkout page successfully!');
me.wait(1000);
me.evaluate(function(selector) {
$(selector).remove();
}, '.adv');
}, function() {
console.log('Open checkout page failed!');
});
}
}
}
},
'another-page': {}
}
####Built with:
FAQs
Rockcss is a command line tool built to find image-based differences between website updates. Base on Succss.
We found that rockcss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.