
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@workos-inc/widgets
Advanced tools
A suite of React components providing functionality for enterprise app workflows.
A suite of React components providing functionality for enterprise app workflows.
Run pnpm install in the root directory to install the dependencies.
The following instructions will follow using the nextjs example but the same steps can be applied to other examples.
Spin up your local WorkOS instance (rush start).
Create a .env file in the root of the nextjs directory using the .env.example file as a reference.
Uncomment the values under # Optional configuration.
# Optional configuration
WORKOS_API_HOSTNAME="localhost"
WORKOS_API_HTTPS=false
WORKOS_API_PORT=7000
On your local WorkOS dashboard, go to the Get started homepage grab the WORKOS_API_KEY and WORKOS_CLIENT_ID and add them to your .env file.
Generate a 32 character password for WORKOS_COOKIE_PASSWORD and add it to your .env file.
After steps 4 and 5, your .env file should look like this:
# https://workos.com/docs/reference/api-keys
WORKOS_API_KEY="sk_dev" # retrieved from the WorkOS dashboard
WORKOS_CLIENT_ID="client_dev" # retrieved from the WorkOS dashboard
WORKOS_COOKIE_PASSWORD="some-password-thats-32-chars-long" # generate a 32 character password
NEXT_PUBLIC_WORKOS_REDIRECT_URI="http://localhost:4040/auth/callback" # configured in the WorkOS dashboard
On your local WorkOS dashboard, go to the Redirects page and add the following URL to the Sign-in callback section:
http://localhost:4040/auth/callback
On your local WorkOS dashboard, go to the Roles page and verify that the following exists, otherwise create it:
Permissions
Name: Manage users, Slug: widgets:users-table:manage
Roles
Name: Admin, Slug: admin, Permissions: widgets:users-table:manage
On your local WorkOS dashboard, go to the Organizations page, add yourself as a user to an organization. Then in the Users table of the organization, open the ... menu, open the Edit role, and set the role to Admin.
On your local WorkOS dashboard, go to the Authentication page and add the following URL to the Cross-Origin Resource Sharing (CORS) section:
http://localhost:4040
Navigate to the packages/hosted-authkit directory and run rushx start to start the hosted AuthKit service.
Run pnpm dev --filter=nextjs to start the example app.
Navigate to http://localhost:4040/ and authenticate using Google to sign into your account.
FAQs
A suite of React components providing functionality for enterprise app workflows.
The npm package @workos-inc/widgets receives a total of 15,568 weekly downloads. As such, @workos-inc/widgets popularity was classified as popular.
We found that @workos-inc/widgets demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.