
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
vue-cli-plugin-eruda
Advanced tools
A Vue CLI 3+ plugin of eruda.
Install under a project created by Vue CLI
, It will automatically load this plugin.
npm install --save-dev vue-cli-plugin-eruda
# If Vue CLI is installed globally
vue add erudu
After injection, a global variable will be provided for calling eruda API.
var eruda = require("eruda");
window.eruda === undefined && (window.eruda = eruda);
// vue.config.js
module.exports = {
// ... your configs
pluginOptions: {
eruda: {
// options
}
}
}
Options key | Type | Description |
---|---|---|
enable | boolean | When NODE_ENV !== 'production' plugin is enabled by default. You can pass true/false to force it to be enabled. |
exclude | regexp | regexp[] | Used to exclude entries which you don't want to inject eruda. For example you are using "pages" option in vue.config.js |
plugins | string[] | Passing plugin name to enable eruda plugin. You can use full module(['eruda-fps']) or shorthand(e.g. ['fps'] ) |
container | element | Container element. If not set, it will append an element directly under html root element |
tool | string[] | string | Choose which eruda's tools you want, by default all will be added. |
autoScale=true | boolean | Auto scale eruda for different viewport settings. |
useShadowDom=true | boolean | Use shadow dom for css encapsulation. |
defaults | object | Default settings. |
Available defaults
settings:
Name | Type | Desc |
---|---|---|
transparency | number | Transparency, 0 to 1 |
displaySize | number | Display size, 0 to 100 |
theme | string | Theme, defaults to Light or Dark in dark mode |
container
, tool
, autoScale
, useShadowDom
, defaults
are eruda's default configuration. You can check document for more information.
FAQs
Eruda Console Plugin for Vue CLI 3+
We found that vue-cli-plugin-eruda demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.