
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
ckeditor4-dev
Advanced tools
The development version of CKEditor - JavaScript WYSIWYG web text editor.
A highly configurable WYSIWYG HTML editor with hundreds of features, from creating rich text content with captioned images, videos, tables, or media embeds to pasting from Word and drag&drop image upload.
Supports a broad range of browsers, including legacy ones.
Note: This is a developer version. Use the CKEditor 4 optimized package for production environment.
npm install --save ckeditor4-dev
Use it on your website:
<div id="editor">
<p>This is the editor content.</p>
</div>
<script src="./node_modules/ckeditor4-dev/ckeditor.js"></script>
<script>
CKEDITOR.replace( 'editor' );
</script>
You can also load CKEditor 4 using CDN.
The CKEditor 4 dev npm package comes in the full-all
preset, so it includes all official CKEditor plugins, with those from the full package active by default.
If you are looking for CKEditor 5, here's a link to the relevant npm package: https://www.npmjs.com/package/ckeditor5
![]() IE / Edge | ![]() Firefox | ![]() Chrome | ![]() Chrome (Android) | ![]() Safari | ![]() iOS Safari | ![]() Opera |
---|---|---|---|---|---|---|
IE8, IE9, IE10, IE11, Edge | latest version | latest version | latest version | latest version | latest version | latest version |
Find out more in the Browser Compatibility guide.
If you would like to help maintain the project, follow the Contribution instructions.
Copyright (c) 2003-2021, CKSource - Frederico Knabben. All rights reserved.
For licensing, see LICENSE.md or https://ckeditor.com/legal/ckeditor-oss-license
FAQs
The development version of CKEditor - JavaScript WYSIWYG web text editor.
The npm package ckeditor4-dev receives a total of 0 weekly downloads. As such, ckeditor4-dev popularity was classified as not popular.
We found that ckeditor4-dev demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.