
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
magical-search
Advanced tools
magical-search is a flexible and lightweight React library for rendering search modals and input fields. Ideal for integrating search functionality into your apps quickly and beautifully.
npm install magical-search
or with pnpm:
pnpm add magical-search
import { SearchIcon } from 'magical-search';
type Person = {
firstName: string;
lastName: string;
email: string;
};
const people: Person[] = [
{ firstName: 'Alice', lastName: 'Smith', email: 'alice@example.com' },
{ firstName: 'Bob', lastName: 'Jones', email: 'bob@example.com' },
];
<SearchIcon<Person>
size={28}
color="#1e90ff"
data={people}
searchKeys={['firstName', 'email']}
renderItem={(person) => (
<div>
{person.firstName} {person.lastName}
<br />
<small>{person.email}</small>
</div>
)}
onSelect={(person) => console.log('Selected:', person)}
/>
| Prop | Type | Description |
|---|---|---|
data | T[] | The array of items to search |
searchKeys | (keyof T)[] | Which fields to search in (e.g., ['name', 'email']) |
renderItem | (item: T) => React.ReactNode | Custom render function for each result item |
onSelect | (item: T) => void | Callback when an item is selected |
size | number | Size of the search icon (default: 24) |
color | string | Color of the icon (e.g. #000, #1e90ff) |
searchPlaceholder | string | Custom placeholder text in the search input |
emptyMessage | string | Custom message if no search results are found |
filter | (item: T, query: string) => bool | Custom filter logic (optional – overrides searchKeys) |

filter, onSelect, placeholder, and moreMIT © Torben Gabriel
FAQs
A React library for search fields and modals
We found that magical-search demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.