
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@libreform/libreform
Advanced tools
Use standard HTML5 markup to create fully functional forms for WordPress.
The older 1.5 branch is not maintained anymore, and will not receive any updates.
libreform, and the accompanying data is in wp_postmeta. Importing and exporting your forms is as easy as ever.required attribute. Can be extended to validate pattern attribute if necessary.## USER_EMAIL ##, ## SUBMISSION ## and ## FORM ##. Think of it as safe eval. Did we mention it's easy to create more of these yourself?Modern HTML markup is a great way to build forms. With Libre Form, there's no need to use clunky form builders that are hard to customise. Ever tried building a pixel perfect implementation of a form design? It's drastically harder when you don't control the markup.
WP Libre Form is built upon the "WYSIWYG" principle. We use the HTML you supply somewhat as-is. We only parse it for selectors and minify it, so wpautop doesn't murder it.
The plugin has been rewritten from the ground up, breaking backwards compatibility. In other words; WPLF 1.5 is dead, long live WPLF 1.5!
Nothing in particular was wrong with 1.5, but it was getting a little annoying to maintain. The original version was written during ONE WordCamp, and we had added countless new features since that. You can still use the old version, but it will not receive updates anymore.
As migrations tend to be a pain in the ass, we've made special efforts to ensure that you don't have to migrate. The new version works side by side with the old one. Everything has been renamed so they do not conflict with each other.
Some key changes;
wp-libre-form to libreformlibreform from libre-formlibreform (the old one was wplf-form)



Install the plugin via Composer
composer require libreform/libreform
Activate the plugin
wp plugin activate libreform
This plugin is available on the official WordPress.org plugin directory. 2.0 has not been submitted to the wp.org plugin directory yet.
You can also install the plugin by directly uploading a copy of this repository in your plugins folder.
FAQs
WP Libre Form client
The npm package @libreform/libreform receives a total of 26 weekly downloads. As such, @libreform/libreform popularity was classified as not popular.
We found that @libreform/libreform demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.