
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@ks-web/area-data
Advanced tools
中国省市区数据,适用于 Vant 的 Area 和 Cascader 等组件。
# 通过 npm
npm i @ks-web/area-data
# 通过 yarn
yarn add @ks-web/area-data
# 通过 pnpm
pnpm add @ks-web/area-data
在 Vant 的 Area 组件中使用时,直接引用 areaList
对象即可:
import { areaList } from '@ks-web/area-data';
在 Vant 的 Cascader 组件中使用时,请使用 useCascaderAreaData
方法:
import { useCascaderAreaData } from '@ks-web/area-data';
const cascaderAreaData = useCascaderAreaData();
中国的行政区划每年都会有变动,如果发现省市区数据未及时更新,欢迎提 Pull Request 帮助我们更新。你可以在「国家统计局 - 全国区划代码」 和「民政部 - 行政区划代码」上查询到最新数据,请根据官方数据进行核实。
FAQs
Ks 省市区数据
We found that @ks-web/area-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.