
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
wl-barrager
Advanced tools
npm install @stl/contextmenu
html:
<div id="barrager"></div>
less:
需要在less文件里面引用
@import (less) "*/node_modules/@stl/barrager/src/index.less"
弹幕的样式文件
ts:
import barrager from "@stl/barrager"
let item = {
img: 'http://120.24.164.80:8080/static/18deed59/images/32x32/blue.png',
content: '弹幕文字信息', //文字
href: 'http://www.yaseng.org', 链接
close: true, //显示关闭按钮
closeImg: 'http://120.24.164.80:8080/static/18deed59/images/32x32/blue.png',
speed: 6, //延迟,单位秒,默认6
bottom: 70, 距离底部高度,单位px,默认随机
color: 'red',// 颜色,默认白色
backgroundColor:"#fff",
beforeCallback?: function(dom){}
}
//初始化
const br = new barrager({parentId: 'barrager', barrageHeight: 200,barragerHeight:44})
//添加弹幕
br.addBarrage(item)
//添加在队列的最前面
br.addBeforeBarrage(item)
//清空弹幕
br.removeAll()
//初始化参数
parentId: string, //容器id
barrageHeight?: number // 弹幕高度限制
childHeight?:number //弹幕子元素的高度 默认为44
//弹幕参数
img?: string, //图片
content: string, //弹幕内容
close?: boolean, //显示关闭按钮
closeImg?: string, //关闭按钮图片地址
speed?: number,//延迟,单位秒,默认6
color?: string,//颜色,默认白色
href?: string,//链接地址
backgroundColor?: string, //背景颜色
barragerSpace?: number //弹幕间的间距 //默认50
beforeCallback?: (dom: HTMLElement) => void //当前弹幕出来前的回调 当前的dom弹幕元素
FAQs
The npm package wl-barrager receives a total of 1 weekly downloads. As such, wl-barrager popularity was classified as not popular.
We found that wl-barrager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.