Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Command line tool for hashing selector names across CSS, HTML and JavaScript files.
The tool makes most scraping robots obsolete by dynamically hashing all selectors across the entire infrastructure of a web application. Most scraping tools achieve their objective by hooking onto certain HTML selector names in the response document. LiquidCSS offers up a way to counter act this approach by changing the selector names without breaking any of the functionality or appearance of the web application.
Install the package with: pip install liquidcss
https://pypi.org/project/liquidcss/
To begin using the tool first create a WorkSpace: liquid init
Register files to the WorkSpace either individually or by specifying a txt
document containing a list of paths:
liquid grab /path/to/file
or liquid grab -r paths.txt
Once files are registered, view their status inside the WorkSpace:liquid status -a
[ID: 0]
name: sample001.css
path: /example/original/sample001.css
type: css
hash: 603706f3aa0a9b7779fca2acd29d4b8e5a68796f846f955c6ac6e72b6f13081a
staged: True
deployed: False
Hash the selector names across all registered files: liquid stage -a
The selector names will be hashed only if they are present in the CSS files registered in the workspace.
The files are now ready to be deployed. The deploy command will swap the files at the registered paths with the hashed files and create
a backup of the original files:liquid deploy -a
Reverse the deployment of the files with hashed selectors and replace them with files stored in backup: liquid deploy -a -r
JavaScript files registered with the WorkSpace can only contain const
or var
key words and only the selector names as strings include the .
or the #
. See the examples in the example folder.
More extensive documentation and further features are in development.
FAQs
Alters css selector names across css files and html templates.
We found that liquidcss demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.