Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
= Website Screenshot
Creates a new webkit window using the QT framework of a specified url and saves a screenshot when the page has finished loading.
== Usage
From ruby:
ws = WebsiteScreenshot.new :url => "http://google.com" ws.get
Check the docs for additional options.
Command line:
$ website-screenshot -u http://google.com
You'll probably want to use this library on a webserver. You can easily do so without installing the full X stack by launching it using xvfb:
$ xvfb-run --server-args="-screen 0, 1400x900x24" --size=1400x900 --url=http://viseztrance.com --file=vise.png
== Flash and other plugins
If flash or any other plugin is installed it will be used while rendering the page. Locations can be set with environment variables such as $QTWEBKIT_PLUGIN_PATH.
== Limitations
Webkit segfaults on rare occasions killing the entire ruby process with it - that's why I encourage calling the script from the command line.
The basic qt webkit browser doesn't handle multiple redirects very well, for this reason the url is initially discovered using curl. Feel free to fork this and get around the limitation.
== Source code
The source code is hosted on Github: http://github.com/viseztrance/website_screenshot
To get WebsiteScreenshot from source:
git clone git@github.com:viseztrance/website_screenshot.git
== Aknowledgements and implementations
This code is the heart of a pet project I wrote in my spare time named {mywebsit.es}[http://mywebsit.es].
I also wrote a {web service}[http://github.com/viseztrance/website_screenshot_service] which I hope is a good starting point to anyone who implements this code.
== License
This package is licensed under the MIT license and/or the Creative Commons Attribution-ShareAlike.
FAQs
Unknown package
We found that website_screenshot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.