Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
country-state-picker
Advanced tools
NPM package to get the list of countries and their states.
npm i country-state-picker --save
getCountries()
This function will return the array of all the countries.
[
{
name: 'Afghanistan',
code: 'af'
},
{
name: 'Albania',
code: 'al'
},
{
name: 'Algeria',
code: 'dz'
},
{
name: 'Andorra',
code: 'ad'
}
...
]
getStates(<country_code>)
This function will return the array of all the states of a given country.
To get the list of all the states of INDIA, the function call will look like:
let states = getStates('in');
console.log(states)
[
"Assam",
"Goa",
"Madhya Pradesh",
"Manipur",
"Meghalaya",
"Mizoram",
"National Capital Territory of Delhi",
"Sikkim",
"State of Andhra Pradesh",
"State of Arunachal Pradesh",
"State of Bihar",
"State of Chhattisgarh",
"State of Gujarat",
"State of Haryana",
"State of Himachal Pradesh",
"State of Jammu and Kashmir",
"State of Jharkhand",
"State of Karnataka",
"State of Kerala",
"State of Maharashtra",
"State of Nagaland",
"State of Odisha",
"State of Punjab",
"State of Rajasthan",
"State of Tamil Nad",
"State of Uttarakhand",
"Telangana",
"Tripura",
"Union Territory of Andaman and Nicobar Islands",
"Union Territory of Chandigarh",
"Union Territory of Dadra and Nagar Haveli",
"Union Territory of Daman and Di",
"Union Territory of Lakshadweep",
"Union Territory of Puducherry",
"Uttar Pradesh",
"West Bengal"
]
FAQs
NPM package to get the list of countries and their states.
The npm package country-state-picker receives a total of 2,178 weekly downloads. As such, country-state-picker popularity was classified as popular.
We found that country-state-picker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.