
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@config-plugins/react-native-siri-shortcut
Advanced tools
Config plugin for react-native-siri-shortcut package
Expo Config Plugin to auto-configure react-native-siri-shortcut when the native code is generated (npx expo prebuild).
Ensure you use versions that work together!
expo | react-native-siri-shortcut | @config-plugins/react-native-siri-shortcut |
|---|---|---|
| 49.0.0 | 3.2.3 | 5.0.0 |
| 48.0.0 | 3.2.2 | 4.0.0 |
Tested against Expo SDK 49
This package cannot be used in the "Expo Go" app because it requires custom native code.
npx expo install.npx expo install react-native-siri-shortcut @config-plugins/react-native-siri-shortcut
After installing this npm package, add the config plugin to the plugins array of your app.json or app.config.js:
{
"expo": {
"plugins": ["@config-plugins/react-native-siri-shortcut"]
}
}
Next, rebuild your app as described in the "Adding custom native code" guide.
When working with Siri Shorcuts, you need to define their identifiers on the Xcode project. To achieve the same result using this plugin, just pass an array of strings with the identifiers of your shortcuts, and they will be added automatically during the build cycle:
{
"expo": {
"plugins": [
[
"@config-plugins/react-native-siri-shortcut",
["com.example.InitiateWorkout", "com.example.FinishWorkout"]
]
]
}
}
FAQs
Config plugin for react-native-siri-shortcut package
The npm package @config-plugins/react-native-siri-shortcut receives a total of 311 weekly downloads. As such, @config-plugins/react-native-siri-shortcut popularity was classified as not popular.
We found that @config-plugins/react-native-siri-shortcut demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.