TL; DR
I te 2026-05-21, te kaiwhakaputa npm jaggle i tukuna ngā putanga e iwa (1.0.0 i roto i 1.0.8Tuhinga o mua @jaggle/resizeobserves i roto i te matapihi e rua hāora pea.
He hapa hapa te mōkihi o te mea tika @juggle/resize-observer polyfill — he mōkihi e whakamahia whānuitia ana me ngā miriona tango ia wiki — engari kāore e tukuna he whakatinanatanga ResizeObserver tuturu.
Engari, ko te mōkihi matau i muri i te tāutanga Ka tāuta i tētahi kawenga Python kua pūpūhia, ka rēhita i te pumau hei kaihokohoko wā-oma e āhua rite ana ki te tūāpapa taketake, ā, ka whakatinana i tētahi kaipahua papatuhituhi whakawhiti-tūāpapa e aro ana ki ngā tauwhitinga moni matihiko.
Linux te āhua o te manawanui python3-dbus-helper, MacOS as com.apple.python.runtime, a Windows as PyRuntimeBroker.
Ka aroturuki tonu te utauta i te papatuhituhi mō ngā wāhitau pēke moni puta noa neke atu i te 40 ngā poraka mekameka ā, ka whakakapi puku i ngā wāhitau kua tāruatia ki ngā pēke moni e whakahaerehia ana e te kaiwhakaeke.
Ka mahi ā-rohe katoa te pūmanawa kino, kāore he hanganga C2 e haere atu ana, ā, ko te whakakapinga papatuhituhi tonu te tikanga tango i te raraunga.
Ko te IOC matua ko te ingoa mōkihi tonu: @jaggle/resizeobserves — tirohia te oropuare i tangohia i roto i te kupu “jaggle” me te “s” i tāpirihia ki roto i te kupu “resizeobserves”.
Te kaha: teitei.
Te Whakaeke: Te Āhua o tana Mahi
npm:@jaggle/resizeobserves kāore e rite ki te pūmanawa kino i runga i te rorohiko noa tirohanga npm. Tona README.md ko te README kupu-kupu o npm:@juggle/resize-observer — ngā tauira waehere ōrite, ngā tohutohu whakamahinga ōrite, ōrite kawemai i te { ResizeObserver } mai i '@juggle/resize-observer' ngā tohutoro puta noa. He tino whānui te tahae tuhinga, ā, mā te hunga e titiro ana ki ngā tuhinga ka whakaaro kei te pānui rātou i ngā tuhinga tika o te mōkihi.
te mōkihi.json, he rerekē, he onge: kāore rehitatanga mara, kotahi ahau te tohu urunga ki bin/kaitiaki-papatopenga.js, Me he i muri i te tāutanga tuhinga e rere ana pūnga npm-install.js. E tohu ana ngā tauira "Te whakamahinga taketake" o te README i tētahi whakatinanatanga JavaScript kāore i te tīariari i roto i te tarball. Ko te JavaScript anake i roto i te mōkihi ko te hōtuhi tāuta.
Wāhanga 1 — ka whakaara anō te npm i te kawenga Python i muri i te tāutanga
npm-tāuta.js he mōhio ki te tūāpapa. Ka kitea he pata ka taea te whakahaere i runga i te ara rapu pumau (/usr/bin/pip3, /usr/rohe/bin/pip, hoki whakamuri ki python3 -m pip), ka tāuta i te mōkihi Python kua whakaemihia mai i te whaiaronga tarball, ā — i runga i te Linux — ka kumea mai xclip or xsel mā tautuhi-whiwhi, Pacman, ranei dnf mēnā kāore tētahi o ēnei i te wātea kē:
Te whakamahi o –ngā-mōkihi-pūnaha-pakaru he mea āta whakaarohia: ka tukuna e ngā tohatoha Linux hou a Python me te tohu taiao whakahaere-waho a PEP 668 kua whakahohea, e aukati ana i ngā tāutanga pip puta noa i te pae mā te taunoa. Ka akiakihia te tāutanga e te tuhinga tāuta.
Kei te mōhio hoki te tuhinga ki te sudo. Ina ko te uid e rere ana te hua o te tāuta sudo npm, e pānui ana te tuhinga SUDO_USER ā, ka puta ngā anga ki kupuhipa whiwhi kia kitea nga tūturu te whaiaronga kāinga o te kaiwhakamahi, kātahi ka tuhia ana kōnae pumau ki reira, kaua ki roto / pakiakaKo te pumau mō ia kaiwhakamahi, ehara i te pūnaha whānui.
Wāhanga 2 — Te pumau o te OS-whakawhiti i raro i ngā ingoa kaihokohoko wā-oma
I muri i te tāutanga o te mōkihi Python, ka rēhita te tuhinga i tētahi tāurunga tīmatanga-aunoa i raro i tētahi ingoa rerekē mō ia pūnaha whakahaere:
- Linux — he wae kaiwhakamahi pūnaha i ~/.config/systemd/user/python3-dbus-helper.service. Ko te waeine Whakaahuatanga is Āwhina Wā-Oma Python D-Bus. Ka ngana anō te tuhinga ki te whakahohe mā te pūnahactl –whakahohe kaiwhakamahi, ka hoki anō ki tētahi hononga ā-ringa i raro i taunoa.whāinga.hiahia/ ina rahua te systemctl. Ki te whakahaerehia i raro i te sudo, ka huri te tuhinga ki sudo -u pūnahactl –kaiwhakamahi, me XDG_RUNTIME_DIR whakaturia kia mahi te karanga pahi-kaiwhakamahi.
- MacOS — he rārangi LaunchAgent i ~/Whare Pukapuka/LaunchAgents/com.apple.python.runtime.plist mā te RunAtLoad=pono a PuritiaKiaOra=pono, kātahi ka utaina mā utaina whakarewa.
- Windows — i whakaohohia a AtLogOn e tētahi Mahi Whakarite ko PyRuntimeBroker te ingoa, me te rohe wā whakahaere o te kore (arā, kāore he wā mutu), i rēhitatia mā PowerShell.
He pono ngā ingoa e toru i te tirohanga tuatahi. python3-dbus-āwhina e whai ana i te tikanga whakaingoa o te whakaurunga Python-D-Bus tika i runga i ngā papamahi Linux. com.apple.python.runtime e whai ana i te tapanga DNS whakamuri a Apple mō āna ake ratonga. KaihokoPyRuntime e whakaata ana i tā Windows RuntimeBroker.exe — he ratonga Microsoft tūturu, kua hainatia e whakahaere ana i ngā tono whakaaetanga mō ngā taupānga UWP. Ehara i te mea he ratonga Apple/Microsoft/Python tūturu ēnei i roto i tēnei horopaki, engari he kaiwawao e mahi ana i te matawai tirohanga tere o systemctl –ngā wae rārangi-kaiwhakamahi or Mahi-Whakaritea kāore pea e ngenge.
Wāhanga 3 — Te kaipahua papatuhituhi
Ko te kawenga Python, i tāutahia ki papapātuhi_kaitiaki/kaitiaki.py, ka whakahaere i tētahi porowhita mutunga kore e tirotiro ana i te papatuhituhi pūnaha i ia 400 mirihekona. I ia tohu, ka kumea ngā ihirangi o te papatuhituhi o nāianei mā pyperclip.whakapiri() ā, ka whakahaerehia ēnei ki tētahi rārangi o ngā kīanga auau kua oti te whakahiato, neke atu i te whā tekau, e kapi ana i ngā whakatakotoranga wāhitau-pēke moni mō Ethereum, Bitcoin, Monero, Solana, TRON, TON, Ripple, Litecoin, Dogecoin, Polkadot, NEAR, Cosmos, Algorand, Stellar, Cardano, Bitcoin Cash, Dash, Zcash, Aptos, Sui, Tezos, MultiversX, Harmony, Terra, Injective, Osmosis, Kava, Celestia, Nano, Filecoin, Ronin, Ergo, DigiByte, Hedera, BNB Smart Chain, me ētahi atu kua whakapotohia engari kāore he mea i roto i te whirihoranga taunoa (Sei, IOTA, Kaspa, Flow, Nervos, Decred, Ravencoin).
Ina tau mai he taurite, ka pānuihia e te tuhinga te wāhitau o te kaiwhakaeke mō taua mekameka mai i ~/.config/kaitiaki-papatopenga/config.json (me ōna rite pūhara rānei) ā, ka tuhirua i te papatopenga ki te tuhinga kua whakakapia:
Kāore he tohu whatunga. Kāore te taputapu kutikuti e waea atu ki te kāinga, kāore e rēhita i ngā kaihautū kua pangia, kāore hoki e tango i tetahi mea. Ko te tango i tetahi mea te whakakapinga tonu: ina tāruatia e te kaiwhakamahi te wāhitau kaiwhiwhi mai i tā rātou atanga putea ka whakapiri ki roto i te pouaka kōrero tuku, nō te kaiwhakahaere te wāhitau kua whakapirihia. Ka ngaro ngā moni i roto i te roopu, he mārama ki te kaiwhakamahi.
He aha ngā mea hou i konei
He iti noa ngā kōrero e kitea ana i te whakataurite ki te tauira crypto-clipper whānui:
1. npm → Whakawhiti Python. Ko te nuinga o ngā crypto-clippers e kitea ana e tātou i roto i te npm he JavaScript parakore, he maha ngā wā ka whakapōreareahia e _0x te hurihanga o te rarangi, te arotake(atob(…)) ngā puranga. Ka whakamahia e tēnei tauira te tarball npm hei takai tuku mō tētahi mōkihi Python — Python ma — ā, ka taea e te pip te whakahaere i te tāutanga whakawhirinakitanga (pīperclip, psutil, kōwhiringa tautuhingaproctitle) i whakapuakina i roto i te kete pyproject.tomlKāore he raruraru JavaScript hei hinga. He Python māmā noa iho te taputapu tapahi, ka taea te pānui.
2. Ngā tapanga pumau Tri-OS i whiriwhiria mō te whaitake. He maha ngā kaiwhakauru papaaho-maha e rēhita ana i te pumau i raro i ngā ingoa whānui (ratonga.whakahōu, helper.plist). Ka whakapau kaha tēnei tauira ki te whiriwhiri i ngā tapanga e rite ana ki ngā kaihokohoko wā-oma taketake o ia pūnaha whakahaere. Ko te whakaingoatanga anake te ngana ki te huna - kāore he kete pakiaka, kāore he huna whenua kaiwhakamahi, kāore he whakapōrearea ara. Ko te peti he onge te arotake a ngā kaiwawao ~/.config/systemd/kaiwhakamahi/ ā, he ratonga e kīia nei ko python3-dbus-āwhina e kore e tū motuhake i roto i tētahi arotake noa.
3. He tūturu te huna i te taitara tukanga, engari kei te moe te whakahē i te tātaritanga. Ka tautuhia e te kawenga Python he _tukanga_huna() mahi e whakatakoto ana i te taitara tukanga mā te tautuhingaproctitle (Linux/macOS) rānei TautuhiPapatohuTaitaraW (Matapihi) — me matua () e karanga ana. Nō reira ps aux ka whakaatu python3-dbus-āwhina hei utu mo o python3 …/kaitiaki.pyHeoi anō, ko taua kōwae anō e tautuhi ana i tētahi kei te_aroturuki_te_haere() mahi e whakarārangi ana i ngā taputapu aroturuki tukanga e mōhiotia ana (htop, btop(, Kaiwhakahaere Tūmahi, Aroturuki Mahi, Kaitukituki Tukanga, Aroturuki Rauemi, ngā aroturuki pūnaha GNOME / KDE / Xfce / MATE, me ētahi atu) — me matua () Kāore e karangatia. Ka rere tonu te takahuri whakakapinga, ahakoa kei te tuwhera te aroturuki tukanga a te kaiwhakamahi. He waehere mate te mahi i roto i te putanga i tukuna. He toenga pea nō tētahi putanga o mua, he tūāpapa rānei mō tētahi āhuatanga kāore anō kia honoa. Ahakoa pēhea, ko te mata tātari-kore o te kawenga kua whakaputaina he whakaingoa anō i te taitara tukanga, ehara i te karo aroturuki hohe.
4. Te whanonga whirihora-whakaurunga kua whakaemihia. npm-tāuta.js ka tuhia te rārangi pēke moni taunoa ki ~/.config/kaitiaki-papatopenga/config.json ā, mēnā kei te wātea kē he kōnae whirihoranga, ka hanumi ki roto i ngā kī katoa e takoto kau ana te uara o nāianei. Ko te tikanga he kaiwhakamahi kua pangia i mua, ā, kua horoia te whirihoranga i ētahi wāhanga — hei tauira, mā te whakakore i te ethereum uara — ka whakakīia anōtia e ia tāutanga mōkihi kino e whai ake nei. Kāore he horoinga o te kōnae pumau i roto i tētahi ara waehere.
| Te Rā / Te Wā (UTC) | takahanga |
|---|---|
2026-05-21 18:50:32 | @jaggle/resizeobserves@1.0.0 whakaputaina. |
2026-05-21 19:55:55 | 1.0.1 kua whakaputaina — te putanga tuatahi i tohua e te matawai o waho. |
2026-05-21 19:58:10 | 1.0.2 whakaputaina. |
2026-05-21 20:05:03 | 1.0.3 whakaputaina. |
2026-05-21 20:09:24 | 1.0.4 whakaputaina. |
2026-05-21 20:13:48 | 1.0.5 whakaputaina. |
2026-05-21 20:41:52 | 1.0.6 whakaputaina. |
2026-05-21 20:43:56 | 1.0.7 kua whakaputaina — ka tāpirihia he try/catch te takai huri noa i te putea-whiringa tuhi taahiraa ki roto npm-install.js. |
2026-05-21 20:46:15 | 1.0.8 kua whakaputaina — kua whakaingoatia te kaiwhakauru npm-install.js → npm-install.cjs (ipurangi ōrite-paita). |
2026-05-22 | Kua whakaputaina ngā whakataunga me ngā IOC. Kei te noho tonu ngā putanga i roto i te rēhita i te wā i whakaputaina ai (kei te haere tonu). |
E iwa ngā putanga i roto i te kotahi hāora me te rima tekau mā ono meneti he tere ahakoa he typosquat. He rite te tauira ki te kaupapa whakaputa-me-tahu — ringihia te rēhita ki raro i te kotahi kakau, tukua kia haere te kimi, ka neke ki tētahi kakau hou ina tangohia te putanga kotahi. Ko ngā awaawa e kitea ana puta noa i te oma he āhua ataahua: 1.0.1 i tāpirihia he mārama /usr/bin/pip3ngā ara -style ki te rārangi rapu pip (sudo-compatibility), i takaihia e te 1.0.7 te wallet-config write ki roto i te try/catch, ā, i whakaingoatia anōtia e te 1.0.8 te tāuta mai i .js Tuhinga o mua .cjs me te pupuri tonu i tōna ihirangi kia rite ki te paita. Ko te .cjs whakaingoatia ngā ara me ngā whakatūpato npm mō te whakataunga kōwae koretake i roto i ngā mōkihi me te kore he māramatanga "momo" mara, ā, he ngana pea ki te pehi i te haruru i te wā tāutanga ka kukume i te aro. Kāore te kawenga Python — te wāhanga anake e tahae ana — i rerekē puta noa i ngā putanga e iwa.
Ngā Tohu o te Whakaaetanga
Kete
| Te haukori | mōkī | Tuhinga | Tūnga |
|---|---|---|---|
| npm | @jaggle/resizeobserves | 1.0.0 i roto i 1.0.8 | I te wā i whakaputaina ai; kei te tonoa kia tangohia. |
Ngā Kōnae me ngā Hash
| Ara | Notes |
|---|---|
clipboard_guardian/guardian.py(md5 f7935c2c82bc881288611ab6cd634f17) | He rite tonu puta noa i ngā putanga e iwa kua whakaputaina (1.0.0 i roto i 1.0.8). Te kawenga o te kutikuti. |
npm-install.js (1.0.0 – 1.0.7)npm-install.cjs (1.0.8) | Kaiwhakauru pumau; whanonga ōrite tonu. 1.0.7's .js a 1.0.8's .cjs he ōrite te paita. |
~/.config/clipboard-guardian/config.json | Whirihoranga pumau Linux me te putea putea. |
~/Library/Application Support/clipboard-guardian/config.json | te whirihoranga pumau o te macOS me te putea putea. |
%APPDATA%\clipboard-guardian\config.json | Whirihoranga pumau Windows me te putea putea. |
~/.config/systemd/user/python3-dbus-helper.service | Te pumau o te tīmatanga-aunoa o Linux. |
~/Library/LaunchAgents/com.apple.python.runtime.plist | te pumau o te macOS LaunchAgent. |
~/Library/Logs/com.apple.python.runtime.log | te takiuru stdout/stderr macOS mō te kaihoko. |
Scheduled Task PyRuntimeBroker | Mahi tīmata-aunoa a Windows (AtLogOn, kāore he wā whakatā). |
Tohu Whanonga
| Waitohu | Whakaahuatanga |
|---|---|
pip install --break-system-packages mai i te npm i muri i te tāutanga | Ka akiaki i te tāutanga Python puta noa i te pae kia karo i ngā parenga PEP 668. |
apt-get install -y xclip (pacman/dnf rānei) | Ka tāuta i ngā taputapu papatuhituhi ki runga i te Linux i te wā e tāuta ana i te mōkihi. |
python3-dbus-helper.service wae kaiwhakamahi pūnaha | I rēhitatia te manawanui i raro i tētahi ingoa āwhina-wā-haere e āhua pono ana. |
com.apple.python.runtime Kaihoko Whakarewa | Tapanga pumau i waho o ngā ara pūnaha Apple tika. |
PyRuntimeBroker Tūmahi Kua Whakaritea | He pumau rūpahu a te kaihokohoko wā-haere o Windows, kāore he pūtake tāuta tika. |
Te tukanga Python e kiia nei ko python3-dbus-helper kawemai pyperclip a psutil | Kāore i te ōrite te whanonga i waenga i te ingoa tukanga kua whakaaturia me ngā whare pukapuka kawemai. |
| Ngā huringa papatopenga ~0.4s i muri i te tāruatanga o te wāhitau putea | Te whanonga waitohu o te whakakapinga wāhitau moni matihiko. |
Pūkete putea whakaeke (rārangi hopu kaiwawao)
Ka tukuna te rārangi pēke moni mā te waehere pūmau npm-tāuta.js a papapātuhi_kaitiaki/kaitiaki.pyKa taea e ngā kaiwawao te whakamahi i te rārangi hei rārangi ārai (me whakaaro he mea whakapae tetahi whakawhiti ki ēnei wāhitau mai i ngā pēke moni a te kamupene) me te kī rapu (me whakaaro he tohu mate te noho o tētahi o ēnei aho i roto i tētahi kōnae whirihoranga kāore i whakamanahia, i tētahi taonga hanga, i tētahi mīhini kaiwhakawhanake rānei).
Pūkete Putea a te Kaiwhakaeke
| Faanahoraa | Wāhitau |
|---|---|
| Ethereum / BSC | 0x450c0E58Fc2ba03632d3F5780ad8C966648B6F18 |
| Ronin (EVM) | ronin:450c0E58Fc2ba03632d3F5780ad8C966648B6F18 |
| Bitcoin | bc1qs2mpls4p0f7fng073gy2rcdgjpf7la4eugpt6y |
| Bitcoin Moni | bitcoincash:qqmvyxxklzp7l3eslxavhc8phl6hprdf25lwc29nlt |
| Litecoin | ltc1qnefc8x59a9cwtqnflt8hmqvezqw4hc7lt3fkqe |
| Dogecoin | DNEJmYRZtzyK44tZea4S7wV3otTyRk48Fy |
| Pīhono | XtJ7E6mnhPK93Vib29PGQrTmQjhTTqFwbS |
| Tuhinga o mua | t1d4hcEnBjdh9X6Wb6R2dxqjnxddJ6ocP8M |
| DigiByte | DPmH2dhiGK3hk3A69tZUMz6tHzGFHBzSrH |
| Monero | 42zhAidVhP7QETk83JAspS59ASALSHFio44vmu6MdDCz15cSqtqsG4QVyzY8vTrjGrTEA6zMbWW6Yft1Ynz1xLfCN5FVbXf |
| Solana | DWBAmQLi9gP6mk7UfJfQGYTV1UPK32WekLTqg83q1mc5 |
| TRON | TVgEgMemmJABYYnbNr1Wi8bSgADEkdEBt2 |
| TON | UQDTSkvwmptU9eG988KgxS3WjnYAZlXgfpJxnz4mhWZAvULr |
| pōkare | r9tj3cMCiqRijNYqNVYNuwKykkQfS8FE4H |
| polkadot | 1JSkYqXQE4d28HdcmTPhbgCrdiPFTfSHxD67tam16p53oBG |
| NEI | 5d6aec44551529e8cd9ebd3aaa84b3832fc3c7463596b2b6e72635b80096a364 |
| Cosmos | cosmos1pzfl3kv5g8g0ernj86rwpar08u2zl9suthx28e |
| rerewai | osmo1pzfl3kv5g8g0ernj86rwpar08u2zl9surv463t |
| Celestia | celestia1pzfl3kv5g8g0ernj86rwpar08u2zl9su6ah6a5 |
| Ka whai kiko | inj1g5xquk8u9wsrvvkn74uq4kxfvejgkmccn578gh |
| Kava | kava1kjfvgcz4q0y9yae2f3pa33vhj2estxxj3sqqux |
| Harmony | one19hn0n7dzkhtl9ta9ekv5592s85jwstpka76t3a |
| Terra | terra1h0dwu8z405jagdlr0fgr9jllac2sxajzlgme5x |
| Algorand | XSAMN3FTB5SUHUQFENBDDRXIMOPNFVLKAWA3RNOU54DWROMDZ6SR7DZ2PI |
| Stellar | GACNZSV4EQO65NZZUOBS3TMJM7GFTSRNKQBVJOX5P2G7U7SEBQ2ZUDJE |
| Cardano | addr1qyj050vla4cglmyrgm4vzf3dxtn0gynpks4t7vp7s3lg49e9wt0s94hcztzdgecxcz5hu9uk56q60yth6d66w026s2kq3ma56f |
| MultiversX | erd1slvlgqsmwzk0c8xtksm4eq5vdfnc26slpzqsyxhz456zvme5rpasue6ge0 |
| tika | 0x580ecda1ebd6ca5a46be2097568d013308bd54ef1d147acb880b59f7709f280e |
| sui | 0xf7e8a9a970fa65c058745c4b2cf2a856cc0283863e4ed1e142648f26097b0c78 |
| mitanano | nano_393n56a5pfz8zg3nkzf7mytfgagzhu5mn9i3xiqg54weq8n1u8jgezxas7dn |
| Filecoin | f1fypyww3xubopfnv7q6yh5l4bko44wmfktf3ckui |
| Tezos | tz1RccjnorHk61bt73ArLXcdgFjEj6T1ochk |
| Ergo | 9g1pNQGnFg7Hk1d9Z66bgHMkguGU7R41btypAnbG1NF5FJoNdBA |
| Hedra | 0.0.10488092 |
Kāore ngā mekameka whai roherohe engari he mokowā pēke kau i roto i te whirihoranga taunoa — Sei, IOTA, Kaspa, Flow, Nervos, Decred, Ravencoin, Beacon-Chain BNB — e whakakapia ana i roto i tēnei hanganga engari ka kitea. Me whakaaro ki a rātou hei whānuitanga aroturuki, kaua hei whānuitanga whakakapinga.
Te Whakawhiwhinga me te Hihiri
He angiangi te mata tohutoro o te kaupapa. Kāore anō kia taea e mātou te whakaū i te tuakiri o te kaiwhakahaere. Ngā mea ka taea e mātou te tuhi:
- Ngā raraunga a te kaiwhakaputa. Te pūkete npm wiri e whakarārangi ana i tana īmēra hei olgascarlet@deltajohnsons.comTe rohe deltajohnsons.com kāore e whakatau ki tētahi tuakiri umanga ka taea e mātou te manatoko. Kāore te pūkete npm e whakaatu ana i te manatoko īmēra, ā, kāore hoki SCM manatoko. Kāore he aroaro tūmatanui o GitHub.
- Āpure putunga. te mōkihi.json kāore e mau rehitatanga mara. Ko te mea tika npm:@juggle/resize-observer e tohu ana i tētahi putunga GitHub tūturu me ngā mano tini whetū me ngā take hohe. Ko te ngaro o tētahi hononga putunga te tohu tirohanga tere rawa atu i runga i te atanga kaiwhakamahi npm.
- Tāruarua README. Ko te mōkihi README te mea tika @juggle/resize-observer README paita-mō-te-paita, tae atu ki kawemai ngā tauira e tohutoro ana @juggle/resize-observer tonu (ehara i te mōkihi whakaputa). Kāore te kaiwhakahaere i aro ki te tuhi anō i ngā kawemai — he tohu noa kua tangohia te readme, kāore i urutauhia.
- Kāore he hanganga hei hurihanga. Kāore he pito C2, kāore he rapu DNS, kāore he IP. Kei roto katoa te whanonga kino i te kutikuti ā-rohe me te paihere putea kua whakakōwaea. Nā tēnei ka kore e taea te huri i te rohe, i te ASN rānei. Me whakataurite ngā kaiwawao e huri ana i ngā pakanga i ngā putea ki tētahi kutikuti o mua kei a rātou; ko te whakamahi anō i te putea puta noa i ngā putea te hononga whakawhiti-pakanga tino māmā.
- Te kōwhiringa ingoa. @jaggle/resizeobserves kotahi te pūāhua i tawhiti atu i @tākaro me te kotahi te rerekētanga mai i te mea rongonui te kaimātakitaki-rahi. Ko te tawhiti whakatika katoa he tohu e rua. He tukinga tirohanga ātaahua tēnei, ehara i te piko noa iho.
Te hihiri, i ahu mai i te whanonga kawenga: te whiwhi moni mā te whakakapinga papapātuhi whai wāhitanga. Kāore he hauhake tohu, kāore he tohu tapumati manaaki, kāore he pānui taurangi-taiao. Kāore te kaiwhakahaere e aro ki te tangata i pāngia - e aro ana rātou ki te tohu whakawhiti a te tangata i muri mai ki tētahi o ngā wāhitau kua whakarārangihia. Ko te kapinga mekameka whā tekau ko te tauira rota e mahi ana: maka whānuitia, ko te tumanako ka tau he whakapiri uara-nui kotahi mō ia N tāutanga.
Te āhua nei kāore te kaiwhakahaere e aro ki te tango. Ko te whakaputa i ngā putanga e iwa i roto i ngā haora e rua i raro i te whānuitanga kotahi e kīia ana he kakau whakaputa-me-tahu: whakanuia te tapuwae rēhita i mua i te hopunga o te whakaroa tango, kātahi ka neke atu. Kāore mātou i kite @jaggle te whakaputa anō i raro i tētahi whānuitanga hou i te wā e tuhi ana, engari e tumanakohia ana he whānuitanga rite tonu (@jaggie, @juggle-, @joggle) kia puta mai i ngā rā e haere ake nei mēnā kei te hohe tonu te kaiwhakahaere.
Pānga, Ngā Auahatanga me Ngā Mea e Tika Ana kia Mahihia e Ngā Kaiwawao
pānga
Kāore e taea te ine i te pānga ki te moni tūturu mai i te huinga raraunga o nāianei. Kāore te taputapu tapahi e tuhi i te telemetry, ā, kāore anō kia kitea ngā pēke moni e whiwhi ana i ngā whakawhiti whakakapinga i te wā mutunga o te tātaritanga (kei runga i tā mātou rārangi he tirohanga whai muri o ngā mekameka kua whakarārangihia). Ko te mea tika npm:@juggle/resize-observer e whitu mati te toharite o ngā tango ia wiki — he ūnga e nui ana te hunga e raru ana i ngā hapa taipa — ā, i raro iho i te 24 hāora te roa o te ora o te mōkihi kino i te wā i whakapuakina ai, e whakawhāiti ana i te taupori e kitea ana engari kāore e kore.
Ehara i te mea he tikiake tika te radius pahūtanga e tika ana kia aroturukihia @jaggle/resizeobserves — he iti pea ēnā. He **tāuta whakawhiti**: he kaiwhakawhanake e tāpiri ana i te mōkihi ki tētahi kaupapa pouaka onepu, e whakahaere ana npm tāuta, kātahi ka wareware i te matau tāuta i whakahaerehia. Kei ia mīhini i tukatuka i te tāutanga i muri i te tāutanga he kaipahua papapātuhi mō ia kaiwhakamahi kei te tīmata-aunoa, ahakoa kei runga tonu te kaupapa i te kōpae. Te tango i te whaiaronga mōkihi mai i kōpuku_modules kāore e **tango** i te u tonu.
Ngā tauira e puta ake ana
E rua ngā ia auaha e whakaatuhia ana i tēnei kaupapa.
npm hei takai tuku uta-Python. He tāuta raina-4 te tarball npm; ko te tahae tūturu ko Python, i tāutahia puta noa i te pūnaha e pata mai i te whaiaronga kua whakaemihia. Ehara tēnei i te mea hou — kua kite tātou i ngā mōkihi npm e whakataka ana i a Python i mua — engari kei te noho hei āhua noa ake puta noa i ngā kaupapa crypto-clipper. E rua ngā painga ki te kaiwhakahaere: ngā whare pukapuka papapātuhi Python (pīperclip tuatahi i roto i a rātou) he ma ake, he maha ake ngā tūāpapa whakawhiti i ngā mea ōrite ki a JavaScript, ā, Ko te nuinga o ngā matawai npm aunoa he taumaha rawa ngā kōnae JavaScript me Python .py ngā paihere māmā. Ko te utu he nui ake te haruru o te tapuwae tāutanga — he mea hou pip tāuta he uaua ki te huna i runga i tētahi mīhini kaiwhakawhanake kāore i te nuinga o te wā pip tāuta i roto i npm tāuta.
Ko ngā ingoa taketake o te papaaho te mea huna anake. He maha ngā kaiwhakaahua kutikuti me ngā tahae uta iti kua whakarērea te whakapoauautanga taumata-waehere, ā, kua huri ki ngā tapanga pumau āhua tika. python3-dbus-āwhina, com.apple.python.runtime, a KaihokoPyRuntime he tauira pukapuka ako — ngā ingoa ka pekehia e te kanohi o te kaiwawao i roto i te rārangi o ngā ratonga kaiwhakamahi e whā tekau. He momo huna iti te utu, he roa hoki tēnei: ka tangohia ia mōkihi, engari ka ora tonu ngā kōnae pumau i te tangohanga, ā, ko te ratonga i tapaina i muri i tētahi wāhanga tūāpapa āhua tūturu, kāore e horoia e tētahi atu mea engari he arotake mārama.
Ngā mea me mahi e ngā kaiwawao
- Arotake i te ~/.config/systemd/user/, ~/Library/LaunchAgents/, me te Get-ScheduledTask Putanga i runga i ngā mīhini kaiwhakawhanake mō ngā tāurunga kua whakarārangihia ki ngā IOC. Mā te tango i te mōkihi npm ka waiho ēnei kia mau tonu; me tango ā-ringa.
- Āraia ngā whakawhiti ki ngā wāhitau putea kua whakarārangihia i ngā rohe o te putea-kamupene me te putea-DeFi kei reira te rārangi wāhitau e wātea ana.
- Rapua te ~/.config/clipboard-guardian/config.json (me ngā tūāpapa ōrite) puta noa i te kahui kaiwhakawhanake-mīhini. He tino mate te noho mai o te kōnae ahakoa ko tēhea putanga mōkihi i tuku mai.
- Rapua te node_modules/ mō te clipboard_guardian/guardian.py i roto i ngā whakaahua o te keteroki-hanga e whai ake nei i mua i te tangohanga. He pumau te md5 o te kōnae puta noa i ngā putanga katoa kua arotakehia.
- Maukati-kōnae-pine @juggle/resize-observer (te mōkihi tika) kia kore ai e taea e ngā tāutanga ā muri ake nei te whakatau i tētahi atu mea i raro i te momotuhi hapa kotahi-pūāhua, inā koa i roto i ngā rerengamahi kore-raka kōnae pēnei i npx.
- Whakamaaramahia tetahi npm postinstall e karanga ana i te pip install hei tino kaha i roto i te hanganga-pipeline kaupapa here. Kāore he take tika e hiahiatia ai he pip e te mōkihi npm i te wā tāutanga — ka tohatohahia e te taputapu Python ngā taputapu Python.
- Rapua ngā raraunga aroturuki process_iter()-whakatairite mō ngā tukanga e kiia nei ko python3-dbus-helper e kawemai ana i te pyperclip — ko te kore taurite o te huna (te kaiawhina D-Bus e pupuri ana i te whare pukapuka papatuhituhi) te tohu whanonga tino ma kei a mātou.
- Hurihia ngā wāhitau pēke moni i whakapirihia mai i ngā mīhini kua pangia. Ka whakararu te kaipahua papatuhi i te ara i waenga i te atanga kaiwhakamahi putea me te ūnga whakapiri; ka taea te whakarerekē puku i ngā wāhitau i tāruatia i te wā e pangia ana. Ko ngā mea katoa e tukuna ana i te wā o te matapihi pangia me whakaaro he mea hē pea.
Ko te mea nui: ka roa ake te ora o te manawanui i te tangohanga. Ka tangohia e te rēhita ā tōna wā @jaggle/resizeobserves i ngā putanga e iwa katoa; kāore te wae pūnaha, te LaunchAgent, me te Mahi Whakaritea e tango i a rātou anō.
Tohutoro
- @juggle/resize-observer i runga i te npm — te mōkihi tika e whakaarihia ana e tēnei typosquat; he mea whai hua hei tūāpapa mō te tāruarua README paita-mō-te-paita.
- @jaggle/resizeobserves raraunga rēhita — whakaputa i ngā tohu wā mō ngā putanga kino e iwa, he mea whai hua mō te whakarite i te wā tirotiro ture.
