
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@radix-ui/react-aspect-ratio
Advanced tools
react-aspect-ratioView docs here.
react-aspect-ratio is another package that allows you to maintain aspect ratios for elements. It is straightforward to use but may lack some of the advanced features and flexibility provided by @radix-ui/react-aspect-ratio.
react-container-query allows you to apply styles based on the size of a container, which can be used to maintain aspect ratios indirectly. It offers more general functionality for responsive design but requires more setup compared to @radix-ui/react-aspect-ratio.
FAQs
Unknown package
The npm package @radix-ui/react-aspect-ratio receives a total of 34,860,857 weekly downloads. As such, @radix-ui/react-aspect-ratio popularity was classified as popular.
We found that @radix-ui/react-aspect-ratio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.