
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@manychat/react-highlighter
Advanced tools
Highlight select fragments of a string using an HTML element and/or a class.
npm install react-highlighter --save
var Highlight = require('react-highlighter');
<Highlight search="brown">The quick brown fox jumps over the lazy dog</Highlight>
search
: The string of text (or Regular Expression) to highlightcaseSensitive
: Determine whether string matching should be case-sensitive. Not applicable to regular expression searches. Defaults to false
ignoreDiacritics
: Determine whether string matching should ignore diacritics. Defaults to false
diacriticsBlacklist
: These chars are treated like characters that don't have any diacritics. Not applicable ignoreDiacritics is false
. Defaults to nonematchElement
: HTML tag name to wrap around highlighted text. Defaults to mark
matchClass
: HTML class to wrap around highlighted text. Defaults to highlight
matchStyle
: Custom style for the match element around highlighted text.Using Mocha/Chai/React.addons.TestUtils for testing.
npm test
Generate a report using Istanbul to make sure your tests are touching everything! FYI, Travis will fail the build if there isn't at least 90% of statement coverage and 100% function coverage.
npm run coverage
Coveralls.io integration requires that the environment variable COVERALLS_REPO_TOKEN
is set.
FAQs
Highlight select fragments of texts
The npm package @manychat/react-highlighter receives a total of 0 weekly downloads. As such, @manychat/react-highlighter popularity was classified as not popular.
We found that @manychat/react-highlighter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.