
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Workarea Commerce plugin that adds Klarna payment options for customers including pay later, pay installments, and more.
This gem contains a Rails engine that must be mounted onto a host Rails application.
Then add the gem to your application's Gemfile specifying the source:
# ...
gem 'workarea-klarna'
# ...
Update your application's bundle.
cd path/to/application
bundle
Configure Klarna credentials. See below.
Klarna support is based on a customer's location. Klarna currently accepts payment from customers of North America, Europe, and will soon support Oceania(Australia).
You must provide credentials for each region you would like to support. The plugin allows multiple options to provide credentials to communicate with Klarna -- environment variables, rails credentials, or admin configurable fields.
Test Environment: https://playground.us.portal.klarna.com/developer-sign-up
Plugin environment variables:
WORKAREA_KLARNA_NA_USERNAME
WORKAREA_KLARNA_NA_PASSWORD
Rails credentials:
klarna:
na:
username:
password:
Or, you can log into the admin and go to Settings > Configuration, and add the North America username and password.
Test Environment: https://playground.eu.portal.klarna.com/developer-sign-up
Plugin environment variables:
WORKAREA_KLARNA_EUR_USERNAME
WORKAREA_KLARNA_EUR_PASSWORD
Rails credentials:
klarna:
eur:
username:
password:
Or, you can log into the admin and go to Settings > Configuration, and add the Europe username and password.
You can get more specific information from the Klarna Developer portal.
Klarna allows you to strategically place information about Klarna payments on your website through On-Site Messaging. The workarea-klarna plugin simplifies the installation process by including the required script tag and some common placements when an admin user configures on-site messaging in the admin.
Workarea provides two configuration fields in the admin under the "Klarna" section to allow the use of messaging. The first field is the on-site messaging client ID. To obtain an ID, go through the activation process on your Klarna merchant portal. This will provide a code sample of the script tag that Workarea will automatically generate. Copy the client ID from that code sample and set it within the Workarea configuration page, select the region that corresponds to the region of your merchant portal (North America, Europe, or Oceania), and you're done!
Once you provide the client ID, Workarea will automatically enable two placements on your site. The first is the "info-page" placement, which is used to generate the page at yoursite.com/klarna and a link to that page will be added to the footer navigation. The second placement is on product detail pages, where a message will display under the add to cart button advertising Klarna as a payment option. The price within this message will update if/when the price of the product changes as a user selects product options.
To add more placements to your site, you can utilize the various system and content pages by adding a HTML content block and copying the placement code from your Klarna merchant portal placements page.
See https://developer.workarea.com for Workarea platform documentation.
Workarea Klarna is released under the Business Software License
FAQs
Unknown package
We found that workarea-klarna demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.