
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
igroot-editor
Advanced tools
igroot-editor is a react markdown editor
npm install igroot-editor -S
import React, { Component } from 'react'
import ReactDOM from 'react-dom'
import Editor from 'igroot-editor'
class App extends Component {
constructor() {
super()
this.state = {
value: ''
}
}
handleChange(value) {
this.setState({
value
})
}
render() {
const { value } = this.state
return (
<Editor
value={value}
onChange={this.handleChange.bind(this)}
preview
/>
)
}
}
ReactDOM.render(
<Editor />,
document.getElementById('container')
)
| name | type | default | description |
|---|---|---|---|
| placeholder | String | 请输入内容... | 占位文本 |
| value | String | - | 输入框内容 |
| preview | Boolean | false | 默认开启编辑 |
| viewOnly | Boolean | false | 只渲染md,不渲染编辑器 |
| lineNum | Boolean | true | 是否显示行号 |
| name | type | default | description |
|---|---|---|---|
| onChange | function(e) | - | 内容改变时回调 |
| onSave | function(e) | - | 保存时回调 |
| name | description |
|---|---|
| tab | 两个空格缩进 |
| ctrl+s | 保存 |
| ctrl+z | 上一步 |
| ctrl+y | 下一步 |
FAQs
react markdown editor
The npm package igroot-editor receives a total of 0 weekly downloads. As such, igroot-editor popularity was classified as not popular.
We found that igroot-editor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.