
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@crisp-fix/lexical-vue
Advanced tools
An extensible Vue 3 web text-editor based on Lexical.
For documentation and more information about Lexical, be sure to visit the Lexical website.
Here are some examples of what you can do with Lexical:
Requires Vue >= 3.5.0.
Install lexical-vue:
npm install lexical-vue # or pnpm or yarn
Below is an example of a basic plain text editor using lexical and lexical-vue.
<script setup lang="ts">
import { $getRoot, $getSelection } from 'lexical'
import {
LexicalAutoFocusPlugin,
LexicalComposer,
LexicalContentEditable,
LexicalHistoryPlugin,
LexicalOnChangePlugin,
LexicalPlainTextPlugin,
} from 'lexical-vue'
const config = {
editable: true,
theme: {
// Theme styling goes here
},
}
function onError(error) {
throw error
}
// When the editor changes, you can get notified via the
// LexicalOnChangePlugin!
function onChange(editorState) {
editorState.read(() => {
// Read the contents of the EditorState here.
const root = $getRoot()
const selection = $getSelection()
console.log(root, selection)
})
}
</script>
<template>
<LexicalComposer :initial-config="config" @error="onError">
<LexicalPlainTextPlugin>
<template #contentEditable>
<LexicalContentEditable />
</template>
<template #placeholder>
<div>
Enter some text...
</div>
</template>
</LexicalPlainTextPlugin>
<LexicalOnChangePlugin @change="onChange" />
<LexicalHistoryPlugin />
<LexicalAutoFocusPlugin />
</LexicalComposer>
</template>
For a more complex example, check the rich text editor playground.
git checkout -b my-new-branchgit commit -a -m 'Description of the changes'
git push origin my-new-branchhttps://lexical-vue.vercel.app
MIT
FAQs
An extensible Vue 3 web text-editor based on Lexical.
We found that @crisp-fix/lexical-vue demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.