
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@twetch/react-iscroller
Advanced tools
An effective react infinite scroll container. inspired by twitter's blog.
As the pwa(progressive web app) becoming more popular, the performance and user experience are more and more important. And infinite scroll is almost the most important part within a pwa project. But i found the results by searching react infinite scroller on github are not my needs. Fortunately, I found this article of twitter on medium by chance. That's i want. So I tried to make my own one.
npm i react-iscroller
It's simple to use as follow:
import { InfiniteScroller } from "react-iscroller"
return <InfiniteScroller
itemAverageHeight={22}
containerHeight={window.innerHeight}
items={this.state.messages}
itemKey="id"
onRenderCell={this.renderCell}/>

the height of the wrapper of the infinite scroller
className attatched to scroller.
your data
identity of your data. help scroller implements pure component.
As the twitter blog mentioned, averageHeight can help scroller to guesstimate the buffer height. Usually your item height.
called when trying to render an item. if you want to force scroller to update cache(eg. after image loaded), you can call this method.
cache the position of rendered item. your might need provide this prop when you want go back to the last place.
set scroller's scrollTop to initialScrollTop after first render. if you had provied cache and initialScrollTop, you can get the last interface before unmount of scroller component.
called when scroller is scrolling.
called after anchor had arrived bottom.
Your item which returned by onRenderCell will be wrapped by a div that used for calculation.
Because of the getBoundingClientRect, I can't get the margin size. So you should not use margin in your
item css.
Because of the scroll bug in ios, if you suffered this problem, it's normally! However, I did some optimization for ios--avoid change scrollTop.
2.x version is a bit heavy for dynamic height. If you can give your dynamic content a certain height, please use the version of 1.1.7.
FAQs
an infinite scroll container for react
We found that @twetch/react-iscroller demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.