
Security News
gem.coop Tests Dependency Cooldowns as Package Ecosystems Move to Slow Down Attacks
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.
Originally based on [TooTallNate's gist](https://gist.github.com/1702813), rewritten to use all the mouse reporting modes.
Originally based on TooTallNate's gist, rewritten to use all the mouse reporting modes.
var mouse = require('term-mouse')();
mouse
.start()
.on('click', function(e) {
console.log('you clicked %d,%d with the %s mouse button', e.x, e.y, e.button /* 'left', 'middle' or 'right' */);
})
.on('scroll', function(e) {
console.log('you scrolled %s', e.button /* 'up' or 'down' */);
});
var mouse = require('term-mouse')(options);
Options:
input - the stream to read events from, defaults to process.stdinoutput - the stream to write control codes to, defaults to process.stdoututf8 - whether to use UTF-8 (1005) reporting mode, this could break things if your terminal only supports the standard reporting mode or if you're using a non-UTF-8 localeEvents:
event - move, buttons and scrollmovebuttons - when a button is pressed or releasedscrollup - when a button is presseddown - when a button is releasedclick - up after down, here there are two event objects passed: the first is from when the button was pressed, the second is from the button being releasedAll of these include an event object:
shift - whether the shift key is downmeta - whether the meta (alt) key is downctrl - whether the control key is downname - 'scroll', 'move' or 'buttons'button - 'left', 'middle', 'right' or 'none' if the button is releasedbtnNum - the button that was pressed / released, if it's not using xterm's ASCII reporting mode then it'll be null when the button is releaseddown - if the button is downx - the x coordinate of the cursory - the y coordinate of the cursorsequence - the string that caused this event (if it's using the standard reporting mode, this could be incorrect because the real sequence is invalid UTF-8)buf - the sequence that caused this event as a bufferI looked at http://invisible-island.net/xterm/ctlseqs/ctlseqs.html and https://www.systutorials.com/docs/linux/man/7-urxvt/ while making this.
FAQs
Originally based on [TooTallNate's gist](https://gist.github.com/1702813), rewritten to use all the mouse reporting modes.
The npm package term-mouse receives a total of 403 weekly downloads. As such, term-mouse popularity was classified as not popular.
We found that term-mouse demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.