
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@braze/web-sdk
Advanced tools
$ npm install --save @braze/web-sdk
Note: The Braze Web SDK is meant to be used client-side in a web application and may not work as expected in a Node.js server environment.
See the Public Github Repo for getting started instructions or our documentation pages for use-case based documentation.
(c) Braze, Inc. 2026 - http://braze.com
License available at https://github.com/braze-inc/braze-web-sdk/blob/master/LICENSE
Mixpanel is an analytics platform that provides similar functionalities for tracking user interactions and events. It also offers advanced analytics and user segmentation features, making it a strong alternative to Braze.
Firebase is a comprehensive app development platform that includes analytics, messaging, and user engagement tools. It offers similar functionalities to Braze for tracking user behavior and sending targeted messages, but also includes additional services like real-time databases and authentication.
FAQs
Braze SDK for web sites and other JS platforms.
The npm package @braze/web-sdk receives a total of 808,929 weekly downloads. As such, @braze/web-sdk popularity was classified as popular.
We found that @braze/web-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.