
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@meshconnect/react-native-link-sdk
Advanced tools
React Native library for integrating with Mesh Connect.
With npm:
npm install --save @meshconnect/react-native-link-sdk
With yarn:
yarn add @meshconnect/react-native-link-sdk
💡 This package requires react-native-webview to be installed in your project.
With npm:
npm install --save react-native-webview
With yarn:
yarn add react-native-webview
Link token should be obtained from the POST /api/v1/linktoken endpoint. API reference for this request is available here. The request must be performed from the server side because it requires the client's secret. You will get the response in the following format:
{
"content": {
"linkToken": "{linkToken}"
},
"status": "ok",
"message": ""
}
import React from 'react';
import {
LinkConnect,
LinkPayload,
LinkSettings,
LinkEventType,
IntegrationAccessToken,
TransferFinishedPayload,
TransferFinishedSuccessPayload,
TransferFinishedErrorPayload,
} from '@meshconnect/react-native-link-sdk';
const accessTokens: IntegrationAccessToken = [
/* Your access tokens */
];
const linkSettings: LinkSettings = {
accessTokens,
language: 'en',
displayFiatCurrency: 'USD',
theme: 'system',
};
export const App = () => {
return (
<LinkConnect
linkToken={'YOUR_LINKTOKEN'}
settings={linkSettings}
onIntegrationConnected={(payload: LinkPayload) => {
// use broker account data
}}
onTransferFinished={(payload: TransferFinishedPayload) => {
if (payload.status === 'success') {
const successPayload = payload as TransferFinishedSuccessPayload;
// use transfer finished data
} else {
const errorPayload = payload as TransferFinishedErrorPayload;
// handle transfer error
}
}}
onEvent={(event: LinkEventType) => {
console.log(event);
}}
onExit={(err?: string) => {
// use error message
}}
/>
);
};
export default App;
ℹ️ See full source code examples on App.tsx.
LinkConnect component arguments| key | type | Required/Optional | description |
|---|---|---|---|
linkToken | string | required | Link token |
settings | LinkSettings | optional | Settings object |
disableDomainWhiteList | boolean | optional | Disable origin whitelisting[1] |
onIntegrationConnected | (payload: LinkPayload) => void | optional | Callback called when users connects their accounts |
onTransferFinished | (payload: TransferFinishedPayload) => void | optional | Callback called when a crypto transfer is executed |
onExit | (err: string) => void) | optional | Called if connection not happened. Returns an error message |
onEvent | (event: LinkEventType) => void | optional | Callback called when an event is triggered |
The LinkSettings option allows to configure the Link behaviour:
language - Link UI language.displayFiatCurrency - a preferred display fiat currencytheme - Link UI colour theme. Accepts: 'light', 'dark', 'system'.accessTokens - an array of IntegrationAccessToken objects that is used as an origin for crypto transfer flow.disableDomainWhiteList - a boolean flag that allows to disable origin whitelisting. By default, the origin is whitelisted, with the following domains set:
*.meshconnect.com*.getfront.com*.walletconnect.com*.walletconnect.org*.walletlink.org*.coinbase.com*.okx.com*.gemini.com*.coinbase.com*.hcaptcha.com*.robinhood.com*.google.comhttps://meshconnect.comhttps://getfront.comhttps://walletconnect.comhttps://walletconnect.orghttps://walletlink.orghttps://coinbase.comhttps://okx.comhttps://gemini.comhttps://coinbase.comhttps://hcaptcha.comhttps://robinhood.comhttps://google.comhttps://front-web-platform-devhttps://front-b2b-api-test.azurewebsites.nethttps://web.getfront.comhttps://web.meshconnect.comhttps://applink.robinhood.comhttps://m.stripe.networkhttps://js.stripe.comhttps://app.usercentrics.eurobinhood://In Mesh Connect React Native SDK v2, url prop is removed from LinkConnect component. You should use linkToken prop instead of url prop.
orError and onClose props are combined with onExit callback with an optional error message argument.
Following are the renamed props:
onBrokerConnected -> onIntegrationConnectedFrontPayload -> LinkPayloadThe component FrontFinance is renamed to LinkConnect.
Typescript definitions for @meshconnect/react-native-link-sdk are built into the npm package.
To enable our SDK to interact with specific apps, please add the following URL schemes to your Info.plist file:
<dict> tags (example for adding trust, robinhood, and metamask):
<key>LSApplicationQueriesSchemes</key>
<array>
<string>trust</string>
<string>robinhood</string>
<string>metamask</string>
</array>
This configuration allows our SDK to query and interact with the specified apps, ensuring seamless integration and functionality.FAQs
Mesh Connect React Native SDK.
The npm package @meshconnect/react-native-link-sdk receives a total of 1,855 weekly downloads. As such, @meshconnect/react-native-link-sdk popularity was classified as popular.
We found that @meshconnect/react-native-link-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.