Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Trying to add a Tinder-like swipe gem for RubyMotion. Not really production ready but useable. PRs for fixes, refactors and features accepted! This is also my first gem - advice/help is welcome.
This is a wrapper around Richard Kim's TinderSimpleSwipeCards written in obj-c. He does an excellent job detailing how it all works, so that you customize it easily. Some of that got erased when I was making this, so see his source: https://github.com/cwRichardKim/TinderSimpleSwipeCards
create a draggable view background
@draggable = MotionSwipe.build({
frame: CGRectMake(0, 0, self.view.frame.width, self.view.frame.height),
delegate: self # Needed if you want to call method of a class with your button
})
adjust the draggable view's height and width
@draggable.setCardWithHeight(@height, withWidth: width)
create a new draggable view, and add it to the draggable view background
new_card = @draggable.createDraggableView
@draggable.addCard(new_card)
now just append views, buttons, or whatever to that draggable view
# you can assign an id to the card for identification
new_card.cardId = card_id
make sure to load the cards you added into the draggable view background
# this method returns the number of cards
count = @draggable.loadCards()
methods are available to swipe cards left or right without a gesture
@draggable.swipeRight()
@draggable.swipeLeft()
NSUserDefaults are used to track the current card, previously swiped card, and previous swipe direction
@defaults = NSUserDefaults.standardUserDefaults
@defaults["cardCurrent"]
@defaults["cardSwiped"]
@defaults["cardSwipedDirection"]
FAQs
Unknown package
We found that motion-swipe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.