
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A Node.js application that uses the robotjs library to spin your mouse in different shapes.
npx spin-mouse
npx spin-mouse --radius 200 --speed 0.2 --wait 5
See the available options with -h or --help:
npx spin-mouse -h
First, make sure you have Node.js installed on your machine. Then, clone this repository and install the dependencies:
Use SSH if you have set up SSH keys with GitHub:
git clone git@github.com:heystevegray/spin-mouse.git
cd spin-mouse
npm install
Use HTTPS if you prefer not to use SSH:
git clone https://github.com/heystevegray/spin-mouse.git
cd spin-mouse
npm install
| Option | Description | Default Value | Choices |
|---|---|---|---|
-r, --radius | The radius of the shape in pixels that the mouse will move in. | 200 | [100, 200, 300, 400, 500] |
-s, --speed | The speed in milliseconds of the mouse movement. | 0.2 | [0.1, 0.2, 0.3, 0.4, 0.5] |
-x, --shape | The shape of the mouse movement. | circle | [circle, square, triangle, sinwave, coswave, heart, boobs, dick] |
-w, --wait | The wait time in seconds between each spin cycle. | 5 | [5, 10, 15] |
-d, --debug | Show debug information. | false | [true, false] |
-h, --help | Show help information about how to use the program and its options. |
You can stop the program using one of the following methods:
Ctrl + C in the terminal.FAQs
Fake productivity.
We found that spin-mouse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.