
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@react-three/timeline
Advanced tools
npm install three @react-three/fiber @react-three/timeline
| A simple timeline with 2 actions (look at red pill and look at blue pill) with an infinite loop | ![]() |
|---|
const camera = useThree((s) => s.camera)
const redPill = useRef<Mesh>(null)
const bluePill = useRef<Mesh>(null)
useRunTimeline(async function* () {
while (true) {
//transition to look at the red pill
yield* action({ update: lookAt(camera, redPill.current!, spring()) })
//transition to look at the blue pill
yield* action({ update: lookAt(camera, bluePill.current!, spring()) })
}
}, [])
return (
<>
<Text position-y={1} scale={0.3}>
Remember: all I'm offering is the truth. Nothing more.
</Text>
<mesh position-y={-1} position-x={-2} rotation-y={(-30 / 180) * Math.PI} scale={0.2} scale-z={0.4} ref={redPill}>
<sphereGeometry />
<meshPhysicalMaterial emissive="red" emissiveIntensity={0.5} color="red" />
</mesh>
<mesh position-y={-1} position-x={2} rotation-y={(20 / 180) * Math.PI} scale={0.2} scale-z={0.4} ref={bluePill}>
<sphereGeometry />
<meshPhysicalMaterial emissive="blue" emissiveIntensity={5} color="blue" />
</mesh>
</>
)
This project is supported by a few companies and individuals building cutting edge 3D Web & XR experiences. Check them out!

[ ] record, useRecordedTimeline, ... => allows to bind the timeline progress to any controls (e.g. scrolling); allowing using markers to attach scroll positions (e.g. button center screen) to the time of the timeline
FAQs
Write composable declarative 3D behaviors like a story.
The npm package @react-three/timeline receives a total of 60 weekly downloads. As such, @react-three/timeline popularity was classified as not popular.
We found that @react-three/timeline demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 23 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.