
Research
/Security News
npm Malware Campaign Uses Adspect Cloaking to Deliver Malicious Redirects
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.
playgrounds
Advanced tools
Playgrounds is an alternative to Codesandbox or webpackbin with the difference that it's running locally on your computer. This gives you the advantage that you can use your own editor which is already configured like you want. Playgrounds is build to quickly prototype new ideas or try out libraries but not for production ready applications.
# Install playgrounds on your machine
npm install -g playgrounds
# Create your first playground
playgrounds
You can use
npx playgroundsto try out playgrounds without installing it globally.
We support JSX for React, Preact and Inferno. We decide which transform we use based on the imports of the file. If you import from react we will transform JSX to React.createElement. If you import from preact we transform JSX to h. If you import from inferno we transform JSX to Inferno.createVNode. Otherwise we will disable all JSX transforms.
As soon as you import a package from NPM we will download it for you so you don't have to care about this. We also install peer dependencies so nothing is missing.
We support babel-macros out of the box. Feel free to use them.
We currently have templates for React, Preact and styled-components. We try to keep the templates as simple as possible because nobody wants to delete code they don't need.
You can override the existing templates or create a new template in your ~/.playgrounds/templates directory. Create a new directory with the template name and put everything there you want. Then you can use the template with playgrounds --template <template-name>.
🦄
FAQs
Code playgrounds for your computer
We found that playgrounds demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads