
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@radix-ui/react-toggle
Advanced tools
react-toggleView docs here.
react-toggle is a widely-used package for creating toggle buttons in React. It provides a simple API and comes with default styles that can be customized. Compared to @radix-ui/react-toggle, react-toggle is more opinionated in terms of styling but is easier to set up for basic use cases.
rc-switch is a React component for creating switch toggles. It is part of the rc-components suite and offers a highly customizable and accessible toggle switch. Compared to @radix-ui/react-toggle, rc-switch provides more built-in styles and is more feature-rich, but it may require more effort to integrate into a custom design system.
react-switch is another popular package for creating toggle switches in React. It offers a simple and flexible API with built-in styles that can be easily customized. Compared to @radix-ui/react-toggle, react-switch is more focused on providing a quick and easy solution for toggle switches with less emphasis on accessibility and customization.
FAQs
Unknown package
The npm package @radix-ui/react-toggle receives a total of 52,544,299 weekly downloads. As such, @radix-ui/react-toggle popularity was classified as popular.
We found that @radix-ui/react-toggle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.