
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@progress/kendo-react-taskboard
Advanced tools
Important
- This package is а part of KendoReact—a commercial UI library.
- You will need to install a license key when adding the package to your project. For more information, please refer to the KendoReact My License page.
- To receive a license key, you need to either purchase a license or register for a free trial. Doing so indicates that you accept the KendoReact License Agreement.
- The 30-day free trial gives you access to all the KendoReact components and their full functionality. Additionally, for the period of your license, you get access to our legendary technical support provided directly by the KendoReact dev team!
Start using KendoReact and speed up your development process!
The KendoReact TaskBoard library represents popups with information that is related to a UI element. They get displayed when the user clicks or hovers over this UI element.
Among the features which the KendoReact TaskBoard component delivers are:
For any issues you might encounter while working with the KendoReact TaskBoard, use any of the available support channels:
Copyright © 2022 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
Progress, Telerik, and certain product names used herein are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and/or other countries.
FAQs
KendoReact TaskBoard package
The npm package @progress/kendo-react-taskboard receives a total of 8,064 weekly downloads. As such, @progress/kendo-react-taskboard popularity was classified as popular.
We found that @progress/kendo-react-taskboard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.