
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@aria-ui/overlay
Advanced tools
data-align: "center" | "start" | "end"
data-mounted: ""
data-side: "bottom" | "left" | "right" | "top"
altBoundary: boolean
Whether to check the alternate elementContext’s boundary. Please see https://floating-ui.com/docs/detectoverflow#altboundary for more information.
false
autoUpdate: boolean | AutoUpdateOptions
Options to activate auto-update listeners
https://floating-ui.com/docs/autoUpdate
true
boundary: Boundary
Describes the clipping element(s) or area that overflow will be checked relative to. Please see https://floating-ui.com/docs/detectoverflow#boundary for more information.
'clippingAncestors'
elementContext: ElementContext
The element that will be used to check for overflow. Please see https://floating-ui.com/docs/detectoverflow#elementcontext for more information.
'floating'
fitViewport: boolean
Whether to constrain the floating element's width and height to not exceed the viewport.
false
flip: boolean | Placement[]
Whether to flip the placement in order to keep it in view when the preferred placement(s) will overflow the clipping boundary. You can also provide an array of placements to try sequentially if the preferred placement does not fit.
true
hide: boolean
Whether to hide the floating element when the reference element or the floating element is fully clipped.
false
hoist: boolean
Whether to use the browser Popover API to place the floating element on top of other page content. When enabled, the floating element won't be clipped by an ancestor. This provides a similar result to React's <Portals> or Vue's <Teleport>.
true
inline: boolean
Whether to improve positioning for inline reference elements that span over multiple lines.
false
offset?: OffsetOptions
The distance between the reference and floating element.
6
overflowPadding: number
Describes the virtual padding around the boundary to check for overflow. Please see https://floating-ui.com/docs/detectoverflow#padding for more information.
4
overlap: boolean
Whether the floating element can overlap the reference element to keep it in view.
false
placement: Placement
The initial placement of the floating element
"top"
rootBoundary: RootBoundary
Describes the root boundary that the element will be checked for overflow relative to. Please see https://floating-ui.com/docs/detectoverflow#rootboundary for more information.
'viewport'
sameHeight: boolean
Whether to constrain the floating element's height so that it matches the reference element.
false
sameWidth: boolean
Whether to constrain the floating element's width so that it matches the reference element.
false
shift: boolean
Whether the floating element should shift to keep it in view.
true
strategy: "fixed" | "absolute"
The strategy to use for positioning
"absolute"
transform: boolean
Whether to use CSS transforms to position the floating element instead of layout (top and left CSS properties). CSS transforms are more performant, but can cause conflicts with transform animations.
false
FAQs
A collection of web components for building accessible overlays
The npm package @aria-ui/overlay receives a total of 7,096 weekly downloads. As such, @aria-ui/overlay popularity was classified as popular.
We found that @aria-ui/overlay demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.