Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
结合公司现有项目,对一些常用功能进行封装。
导出原始的 axios,以便特殊时刻使用。
vuex 中用于双向同步 sessionStorage 和 vuex 中的数据,便于统一管理维护,使用方法:
// store.js
import Vue from 'vue'
import Vuex from 'vuex'
import { storePlugin } from 'vp-tools'
export default new Vuex.Store({
modules: {},
getters: {},
plugins: [storePlugin],
strict: process.env.NODE_ENV === 'development'
})
暴露出的 $session方法,直接将以前写的$session 方法更换成这个即可。
// globalPlugin.js
import { $session } from 'vp-tools'
function install (Vue, options) {
Vue.prototype.$session = $session
}
export default install
以后全局使用的插件,目前仅设置了$session 挂在到 vue 实例上。
以后插码用的指令。
例如访问的链接为:
会自动的存储 EQS 字段到 session 中,调用$getEncryptQueryString 方法,可以直接获取到解密后的 EQS 数据。 以后需要使用链接上的参数,均采用此种方式进行交互。
FAQs
custom npm init
We found that vp-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.