
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@slice-and-dice/govuk-react-error-summary
Advanced tools
Notice used to display form errors to user - also includes anchors to jump to relevant form sections.
import ErrorSummary from '@govuk-react/error-summary';
Simple
const heading = 'Message to alert the user to a problem goes here';
const description = 'Optional description of the errors and how to correct them';
const errors = [
{
targetName: 'national-insurance-number',
text: 'National Insurance number error',
},
{
targetName: 'description',
text: 'Description of what you saw error',
},
];
const onHandleErrorClick = (targetName) => {
document.getElementsByName(targetName)[0].scrollIntoView();
};
<div>
<ErrorSummary
heading={heading}
description={description}
onHandleErrorClick={onHandleErrorClick}
errors={errors}
/>
<InputField
name="national-insurance-number"
hint="It’s on your National Insurance card, benefit letter, payslip or P60."
>
National Insurance number
</InputField>
<br />
<TextArea name="description">Description of what you saw</TextArea>
</div>
Prop | Required | Default | Type | Description |
---|---|---|---|---|
description | `````` | string | Optional description of the errors | |
errors | `````` | arrayOf[object Object] | Array of errors with text and target element name to scroll into view when clicked | |
heading | 'There is a problem' | string | Heading text | |
onHandleErrorClick | `````` | func | onClick function to scroll the target element into view |
FAQs
Notice used to display form errors to user - also includes anchors to jump to relevant form sections.
We found that @slice-and-dice/govuk-react-error-summary demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.