
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@calcom/atoms
Advanced tools
Customizable UI components to integrate scheduling into your services.
Currently supports React 18, React 19, Next 14 and Next 15.
chore: version packages containing next release changes.❗️Breaking change in the changelog, so please check it out before updating.1.0.102-framer and are intended for isolated use cases, so you most probably
want to use version without any suffix e.g. 1.0.103.Documentation on how to get started with platform solution is here and list of atoms can be viewed here
We use a tool called changesets that helps documenting changes related to your development branch and then manages
atoms versioning and publishing to npm. We need to add a log documenting changes and then letting changesets to gather the changes, update Changelog and update version in package.json.
yarn changesets-add from monorepo root and then select @calcom/atoms using space bar and press enter to go to the next step..changeset directory e.g. .changeset/hungry-donuts-cross.md."version" in the atoms package.json file because changesets will do it in the next step.chore: version packages containing next release changes. This pull request will contain the new log file, it being added to the atoms CHANGELOG.md file and changesets will update the atoms package.json file based whether or not is is major, minor or patch update. When we want to release atoms we simply have to merge this pull request and changesets will publish the new atoms version to npm. Notably,
changesets will publish atoms to npm only if the "version" in the atoms package.json of changeset's PR is higher than in the npm.The following 2 articles teach how to write good change summaries for each PR when it deserves to end up in CHANGELOG.md
Atoms are tested in CI using e2e tests within the example platform app. To run them locally:
yarn dev-on and then yarn build - this will create local build of atoms.NEXT_PUBLIC_X_CAL_ID=""
X_CAL_SECRET_KEY=""
NEXT_PUBLIC_CALCOM_API_URL="https://api.cal.com/v2"
VITE_BOOKER_EMBED_OAUTH_CLIENT_ID=""
VITE_BOOKER_EMBED_API_URL="https://api.cal.com/v2"
ORGANIZATION_ID=""
yarn dev:e2e - this will start the example platform app and run e2e tests by using locally built atoms. Because it is not running within CI it will open a browser and run tests.FAQs
Customizable UI components to integrate scheduling into your product.
We found that @calcom/atoms demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.