
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
expo-fullstory
Advanced tools
Uses Expo config plugins to allow FullStory for Expo/EAS-based React Native applications.
FullStory, on Expo applications, using Expo/EAS configuration plugins!
Warning
This package has been rendered obsolete by @fullstory/react-native@1.1.0. @fullstory/react-native@* is officially supported and maintained by the FullStory team, you should use that instead. This library does not currently a plugin step for asset uploads, and while it would be trivial to add, there is a maintained solution. Consider this library deprecated.
@fullstory/react-native
package.npm i @fullstory/react-native
index.d.ts
adjacent to your application entry-point.declare global {
namespace JSX {
interface IntrinsicAttributes {
fsAttribute?: {[key: string]: string};
fsClass?: string;
fsTagName?: string;
}
}
}
.babel.config.js
)module.exports = {
...
plugins: [
...
'@fullstory/react-native', ['@fullstory/annotate-react', { native: true }],
]
};
Simply install the expo-fullstory
configuration plugin package.
npm i expo-fullstory
Once, that's done, you'll need to configure the plugin.
You can get started by heading to your app.config.json
, or app.config.js
.
Simply add the "plugins"
key if it doesn't already exist, then provide a 2D-array with the package name as the first parameter, and an object defining a version
and orgId
attribute in the second. If you don't have your organization ID, you can retrieve it from the FullStory dashboard.
If you want to find the latest version of the FullStory SDK, you can find that in their "FullStory for Mobile Apps Release Notes".
{
// ...
updates: [
// ...
],
plugins: [["expo-fullstory", { version: "1.27.1", orgId: "o-XXXXX-xx0 }]]
}
Great work, you're done! 🎉
FAQs
Uses Expo config plugins to allow FullStory for Expo/EAS-based React Native applications.
The npm package expo-fullstory receives a total of 2 weekly downloads. As such, expo-fullstory popularity was classified as not popular.
We found that expo-fullstory demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.