Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
tooltipster-scrollabletip
Advanced tools
A Tooltipster plugin to make tooltips scrollable rather than have them overflow the viewport.
A Tooltipster plugin to make tooltips scrollable when they get too big. MIT license.
When the tooltip is about to overflow the viewport, this plugin does the following: put the tooltip on the side which maximizes its size, resize it so it doesn't overflow the viewport, and make it scrollable for the content to be accessible.
The tooltip will go off screen only if the origin itself goes off screen.
Include the plugin file in your page AFTER the Tooltipster bundle file.
<html>
<head>
...
<script type="text/javascript" src="tooltipster/dist/js/tooltipster.bundle.min.js"></script>
<script type="text/javascript" src="tooltipster-scrollableTip/tooltipster-scrollableTip.min.js"></script>
</head>
</html>
This plugin only works in conjunction with Tooltipster's default
sideTip
plugin.
Declare the scrollableTip
plugin in the options of the tooltips you want to be scrollable, alongside sideTip
:
$('.tooltip').tooltipster({
plugins: ['sideTip', 'scrollableTip']
});
Pro tip: for a better style, know that the scrollbar is customizable with CSS in Chrome
Simple as that!
FAQs
A Tooltipster plugin to make tooltips scrollable rather than have them overflow the viewport.
The npm package tooltipster-scrollabletip receives a total of 217 weekly downloads. As such, tooltipster-scrollabletip popularity was classified as not popular.
We found that tooltipster-scrollabletip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.