
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
TypeScript/JavaScript client libraries and CLI for Convex.
Convex is the backend application platform with everything you need to build your product.
Get started at docs.convex.dev!
Or see Convex demos.
Open discussions and issues in this repository about Convex TypeScript/JavaScript clients, the Convex CLI, or the Convex platform in general.
Also feel free to share feature requests, product feedback, or general questions in the Convex Discord Community.
This package includes several entry points for building apps on Convex:
convex/server
: Helpers for
implementing Convex functions and defining a database schema.convex/react
: Hooks and a
ConvexReactClient
for integrating Convex into React applications.convex/browser
: A
ConvexHttpClient
for using Convex in other browser environments.convex/values
: Utilities for
working with values stored in Convex.convex/react-auth0
: A
React component for authenticating users with Auth0.convex/react-clerk
: A
React component for authenticating users with Clerk.This package also includes convex
, the
command-line interface for managing Convex projects.
npm pack
produces a public build with internal types removed.
1.26.2
FAQs
Client for the Convex Cloud
The npm package convex receives a total of 74,485 weekly downloads. As such, convex popularity was classified as popular.
We found that convex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.