-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Overlay didn't display for a malicious package on NPM!! #148
Comments
in any page that does not provide a Repository link, The "packageReport" component does not show. |
Thanks @aviv1620 ! Need to mount Overlay based on another element that always exists. |
Assignee |
…itory element (#149) fix issue 148. #148 **content.npmjs.js** - mount Overlay based on h3 element title "install" instead of repository element. **utils.js** - if the element is not in the page. reject timeout after 10 seconds. make bugs like this more easy to detect next time. **.gitignore** - not pull cache and autogenerated files --------- Co-authored-by: Baruch Odem (Rothkoff) <baruchiro@gmail.com>
Hey! This task was taken over a few days ago, but nothing has happened since then. Maybe the current contributor can comment on this? |
Navigate to
binarium-crm
, you will not see the Overlay extension for npmjs.org.It is a malicious package, and it is a very important issue.
The text was updated successfully, but these errors were encountered: