
Research
/Security News
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.
@ariestools/sdk-react
Advanced tools
All-in-one compatibility and convenience facade for the XY Labs React SDK.
Installing this package intentionally installs every feature package. Application projects that use most of the SDK can continue to import from the root or its stable subpaths:
import { FlexRow } from '@ariestools/sdk-react/flexbox'
Libraries and dependency-sensitive applications should install the smallest owning package instead:
import { FlexRow } from '@ariestools/sdk-react-foundation/flexbox'
import { ButtonEx } from '@ariestools/sdk-react-ui/button'
import { Identicon } from '@ariestools/sdk-react-identicon/identicon'
Package ownership:
@ariestools/sdk-react-foundation: async effects, flexbox, hooks, portals, promises, render checks, rich results, shared utilities, and user-event contracts.@ariestools/sdk-react-ui: accordion, buttons, common components, cookie consent, dialogs, error rendering, quick tips, selects, and themes.@ariestools/sdk-react-app: app settings, app bars, base pages, error reporting, routing hooks and links, scrolling, and web-app shell components.@ariestools/sdk-react-analytics: pixel integrations, experiments, and pixel debugging.@ariestools/sdk-react-crypto: wallet, token, and chain integrations.@ariestools/sdk-react-identicon: lightweight identicons without the wallet stack.@ariestools/sdk-react-motion, @ariestools/sdk-react-json-viewer, and @ariestools/sdk-react-number-status: focused optional features.@ariestools/sdk-react-core remains published as a deprecated forwarding facade for compatibility.
FAQs
Common React library for all XY Labs projects that use React
The npm package @ariestools/sdk-react receives a total of 616 weekly downloads. As such, @ariestools/sdk-react popularity was classified as not popular.
We found that @ariestools/sdk-react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.

Security News
Socket releases free Certified Patches for high-severity Nuxt vulnerabilities, including server-side remote code execution through server island props.

Security News
An open letter signed by 50 companies, from NVIDIA and Microsoft to Mistral and Hugging Face, urges Washington not to restrict open weight AI.