
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@automattic/calypso-razorpay
Advanced tools
A set of helper functions and components for using Razorpay on WordPress.com.
This is a library of components and functions for using Razorpay for credit card processing in Calypso.
You'll need to wrap this context provider around any component that wishes to use useRazorpay. It accepts the following props:
children: React.ReactNodefetchRazorpayConfiguration: GetRazorpayConfiguration A function to fetch the razorpay configuration from the WP.com HTTP API.A React hook that allows access to Razorpay.js. This returns an object with the following properties:
razorpayConfiguration: null | RazorpayConfiguration The object containing the data returned by the wpcom razorpay configuration endpoint. Consumers can use this to instantiate a Razorpay object.isRazorpayLoading: boolean A boolean that is true if the razorpay configuration is currently being loaded.razorpayLoadingError: undefined | null | Error An optional object that will be set if there is an error loading the razorpay configuration.The hook does not provide an instantiated Razorpay object because doing so properly requires an Order ID, the existence of which is negotiated during the order flow. That is, we first initiate a transaction, returning a razorpay order ID negotiated between the backend and Razorpay, and then on the frontend initialize the Razorpay object which handles opening the modal with that order ID.
FAQs
A set of helper functions and components for using Razorpay on WordPress.com.
The npm package @automattic/calypso-razorpay receives a total of 3 weekly downloads. As such, @automattic/calypso-razorpay popularity was classified as not popular.
We found that @automattic/calypso-razorpay demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 52 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.