Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@tcn/omni-chat-client
Advanced tools
A react native component for TCN's omni chat client
Install the module in your project with:
yarn add @tcn/omni-chat-client
Also be sure to install the safe area context peer dependency (see package.json).
Import the OmniChatClient
component from the library.
In the config
prop, pass an object with properties for an API key, url, and some CSS colors, as shown in the example snippet below.
Also be sure to place the OmniChatClient
component somewhere within a SafeAreaProvider
component from react-native-safe-area-context
.
import { OmniChatClient } from "@tcn/omni-chat-client";
import {
// ...
KeyboardAvoidingView,
// ...
} from "react-native";
export function YourComponent() {
// ...
return (
// ...
<SafeAreaProvider>
{* ... *}
<OmniChatClient
config={{
apiKey:
"YOUR API KEY HERE - CAN BE FOUND IN OMNIBOSS CAMPAIGN OVERVIEW",
url: "YOUR URL - CAN BE FOUND IN OMNIBOSS CAMPAIGN OVERVIEW",
mainColor: "YOUR COLORS HERE",
headingColor: "YOUR COLORS HERE",
paragraphColor: "YOUR COLORS HERE",
}}
/>
</SafeAreaProvider>
// ...
);
}
You can optionally pass a zIndex
prop to the OmniChatClient
component to set the z-index of the chat client component. This is useful if the default value doesn't place the component in the correct z position for your app.
<OmniChatClient
config={{
// …
}}
zIndex={100}
/>
release/7.5.x
for exampledeploy-staging
job will runBe sure to use adjustResize
for the windowSoftInputMode
in your Android Manifest file (or in app.json
- expo.android.softwareKeyboardLayoutMode
- if using Expo).
There is currently no way for someone to contribute to this project, nor is there any issue tracking publicly.
FAQs
A react native component for TCN's omni chat client
We found that @tcn/omni-chat-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.