
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
watrmark 是一个用于在网页中创建水印的 npm 包。它提供了一个简单易用的接口,让你可以轻松地添加自定义水印到网页内容中。无论是在保护敏感信息还是在展示品牌标识时,这个包都能帮助你快速生成具有专业外观的水印效果。
使用 npm:
npm install watrmark --save
使用 pnpm:
pnpm install watrmark --save
import { generate } from "watrmark"
generate("水印文本 9311")
import { generate, clearWatrmark } from "watrmark"
const watrmarkId = generate("水印文本 9311")
clearWatrmark(watrmarkId)
对当前网页生成一个水印,并返回一个唯一标识,预留传递给 clearWatrmark 用于清除水印。
| 参数 | 类型 | 描述 | 默认值 |
|---|---|---|---|
| width | number | 水印宽度 | 200 |
| height | number | 水印高度 | 200 |
| fontSize | string | 水印文字大小 | 24px |
| fontFamily | string | 水印字体 | 微软雅黑 |
| color | string | 水印文字颜色 | #333 |
| rotate | number | 水印旋转角度 | 330 |
| opacity | number | 水印透明度 | 0.1 |
返回值
string示例
import { generate } from "watrmark"
const watrmarkId = generate("水印文本 9311")
清除当前网页的水印, 如果不传入 watrmarkId,则清除所有.
import { clearWatrmark } from "watrmark"
clearWatrmark("watrmarkId")
https://github.com/Belen-Luo/watrmark/issues
FAQs
watermark 是一个用于在网页中创建水印的 SDK。它提供了一个简单易用的接口,让你可以轻松地添加自定义水印到网页内容中。
We found that watrmark demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.