Research
Recent Trends in Malicious Packages Targeting Discord
The Socket research team breaks down a sampling of malicious packages that download and execute files, among other suspicious behaviors, targeting the popular Discord platform.
convex
Advanced tools
Readme
TypeScript/JavaScript client libraries and CLI for Convex.
Convex is the backend application platform with everything you need to build your product.
Get started at docs.convex.dev!
Or see Convex demos.
Open discussions and issues in this repository about Convex TypeScript/JavaScript clients, the Convex CLI, or the Convex platform in general.
Also feel free to share feature requests, product feedback, or general questions in the Convex Discord Community.
This package includes several entry points for building apps on Convex:
convex/server
: Helpers for
implementing Convex functions and defining a database schema.convex/react
: Hooks and a
ConvexReactClient
for integrating Convex into React applications.convex/browser
: A
ConvexHttpClient
for using Convex in other browser environments.convex/values
: Utilities for
working with values stored in Convex.convex/react-auth0
: A
React component for authenticating users with Auth0.convex/react-clerk
: A
React component for authenticating users with Clerk.This package also includes convex
, the
command-line interface for managing Convex projects.
npm pack
produces a public build with internal types removed.
FAQs
Client for the Convex Cloud
The npm package convex receives a total of 4,922 weekly downloads. As such, convex popularity was classified as popular.
We found that convex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket research team breaks down a sampling of malicious packages that download and execute files, among other suspicious behaviors, targeting the popular Discord platform.
Security News
Socket CEO Feross Aboukhadijeh joins a16z partners to discuss how modern, sophisticated supply chain attacks require AI-driven defenses and explore the challenges and solutions in leveraging AI for threat detection early in the development life cycle.
Security News
NIST's new AI Risk Management Framework aims to enhance the security and reliability of generative AI systems and address the unique challenges of malicious AI exploits.