
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
cupcake-react-modal
Advanced tools
React component for when you need a modal.
<link href="Modal.css" rel="stylesheet" />
<script src="http://fb.me/react-0.13.3.js" type="application/javascript"></script>
<script src="Modal.js" type="application/javascript"></script>
<Modal
visible={ Boolean() }
closable={ Boolean() }
onShow={ function(){} }
onHide={ function(){} }>
<header>
<h1>Your Modal</h1>
</header>
<p>Hello there</p>
</Modal>
React.createElement(Modal, {
visible: Boolean(),
closable: Boolean(),
onShow: function(){},
onHide: function(){}
},
React.createElement('header', null, React.createElement('h1', null, "Your Modal")),
React.createElement('p', null, "Hello there"));
visible
(Boolean) can be used to toggle visibility of the modal, defaults to false
.
closable
(Boolean) can be used disable rendering of the close button and prevent closing the modal when the overlay is clicked. Defaults to true
.
onShow
(function) is called when the modal becomes visible, defaults to an empty function.
onHide
(function) is called when the modal becomes not visible, default to an empty function.
Displays a modal and prevents the document from scrolling while visible.
The modal contains a close button and clicking on the translucent part of the overlay will also cause the modal to hide.
Because React is awesome and modals are useful.
File an issue if you find anything isn't working as expected.
Pull requests are always welcome, but you should open an issue before working on a new feature (both to ensure it's within the scope of this project and that it's not already being worked on).
FAQs
React component for when you need a modal
The npm package cupcake-react-modal receives a total of 0 weekly downloads. As such, cupcake-react-modal popularity was classified as not popular.
We found that cupcake-react-modal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.