
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@radix-ui/react-checkbox
Advanced tools
react-checkboxView docs here.
react-checkbox-group is a simple React component for creating groups of checkboxes. It provides a straightforward API for managing the state of multiple checkboxes. Compared to @radix-ui/react-checkbox, it is more focused on grouping checkboxes rather than providing individual, highly customizable checkbox components.
react-toggle is a React component for creating toggle switches. While it is not a direct replacement for checkboxes, it serves a similar purpose in allowing users to toggle between two states. It offers a different visual representation compared to @radix-ui/react-checkbox.
rc-checkbox is a React component for creating customizable checkboxes. It provides a basic checkbox component with support for custom styles and controlled/uncontrolled states. It is similar to @radix-ui/react-checkbox in terms of functionality but may not offer the same level of accessibility features.
FAQs
Unknown package
The npm package @radix-ui/react-checkbox receives a total of 44,042,466 weekly downloads. As such, @radix-ui/react-checkbox popularity was classified as popular.
We found that @radix-ui/react-checkbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.