Megathread: Lottiefiles plugin / canvasUI compromised (crypto popups in apps)

[lindsay_knowcode]

If you or your clients are a little anxious after this event - see this post on how to do a risk assessment of all the javascript libraries in use in your Bubbbe app.

How to do a Javascript library Risk Assessment (after the Lottie debacle)

After the debacle with Lottie a few weeks ago, Enterprise customers wanted a risk assessment of ALL plugin libraries used in their Bubble apps. What is the potential risk of any other imported JS libraries? I’ve created a Chrome extension - it lists all the Javascript libraries that your App loads. https://chromewebstore.google.com/detail/js-library-lister/oindknlkenlfcanfhmgoifleiaomgnjf Once you’ve installed the Chrome extension “pin” it so you can see its icon in the extension bar. Then …