
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@babel/compat-data
Advanced tools
The compat-data to determine required Babel plugins
See our website @babel/compat-data for more information.
Using npm:
npm install --save @babel/compat-data
or using yarn:
yarn add @babel/compat-data
Provides compatibility data for core-js, a library that includes polyfills for ECMAScript features. It is similar to @babel/compat-data but focuses on the features polyfilled by core-js.
A lighter version of caniuse-db, containing browser support tables for front-end technologies. It is similar to @babel/compat-data in that it provides compatibility data, but it is more general and not specific to Babel's needs.
A tool for sharing target browsers and Node.js versions between different front-end tools. It is similar to @babel/compat-data in that it helps determine which environments to target, but it does not provide specific feature support data.
FAQs
The compat-data to determine required Babel plugins
The npm package @babel/compat-data receives a total of 143,674,332 weekly downloads. As such, @babel/compat-data popularity was classified as popular.
We found that @babel/compat-data demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.