Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@google-recaptcha/core
Advanced tools
Tool that easily and quickly add Google ReCaptcha for your website or application
🔑 tool that easily and quickly add Google ReCaptcha for your website or application
$ npm i @google-recaptcha/core
# or
$ yarn add @google-recaptcha/core
🔑 Google ReCaptcha this is a library that will allow you to easily and quickly add Google ReCaptcha for your website or application. The main difference from other libraries is that all current versions of Google ReCaptcha are supported here.
Install 🔑 Core Google ReCaptcha with npm or yarn
$ npm i @google-recaptcha/core
# or
$ yarn add @google-recaptcha/core
Google ReCaptcha v3 returns a score for each request without user friction. The score is based on interactions with your site and enables you to take an appropriate action for your site.
Google ReCaptcha v2 invisible does not require users to solve any puzzles or enter any codes. Instead, it runs in the background and analyzes user behavior on the web page to determine if they are genuine users or potential bots.
When a user interacts with the Google ReCaptcha v2 checkbox, advanced algorithms analyze their behavior to distinguish between humans and bots. If the system suspects suspicious activity, additional challenges may be presented, such as image selections or puzzle-solving tasks.
Google ReCaptcha Enterprise is built on the existing reCAPTCHA API and it uses advanced risk analysis techniques to distinguish between humans and bots.
In order to enable enterprise mode, you need to set the flag isEnterprise
in GoogleReCaptchaProvider
. Also in this mode you can pass specials actions
.
The function generateGoogleReCaptchaScriptSrc
function may be needed for applications with ssr to get a link for the recaptcha script and load it before rendering the UI.
Parameters | Type | Required | Note |
---|---|---|---|
host | recaptcha.net or google.com | No | Load script from recaptcha.net or google.com |
isEnterprise | Boolean | Yes | |
render | String | Yes | siteKey of reCaptcha |
hl | String | No | Prop to support different languages that is supported by Google Recaptcha |
badge | inline or bottomleft or bottomright | No | Reposition the reCAPTCHA badge. Depends on type of reCaptcha. If not provide badge is hidden |
The function generateGoogleReCaptchaHiddenBadgeStyles
function returns hidden styles for Google ReCaptcha badge.
☄️ debabin |
🎱️ anv296 |
FAQs
Tool that easily and quickly add Google ReCaptcha for your website or application
The npm package @google-recaptcha/core receives a total of 1,068 weekly downloads. As such, @google-recaptcha/core popularity was classified as popular.
We found that @google-recaptcha/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.