
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
prosemirror-gapcursor
Advanced tools
ProseMirror plugin for cursors at normally impossible-to-reach positions
[ WEBSITE | ISSUES | FORUM | CHANGELOG ]
This is a core module of ProseMirror. ProseMirror is a well-behaved rich semantic content editor based on contentEditable, with support for collaborative editing and custom document schemas.
This plugin implements a
block-level cursor that can be used to focus places that don't allow
regular selection (such as positions that have a leaf block node,
table, or the end of the document both before and after them). Make
sure you load style/gapcursor.css (or define your own styling for
the cursor).
The project page has more information, a number of examples and the documentation.
This code is released under an MIT license. There's a forum for general discussion and support requests, and the Github bug tracker is the place to report issues.
We aim to be an inclusive, welcoming community. To make that explicit, we have a code of conduct that applies to communication around the project.
1.4.0 (2025-10-15)
Nodes can now set a createGapCursor: true property on their spec to allow gap cursors to appear next to them.
The prosemirror-tables package provides table-related functionality for ProseMirror editors, including table creation, editing, and cursor behavior within tables. While it focuses on tables rather than general gap cursor behavior, it offers similar cursor management features within the context of tables.
The prosemirror-schema-list package provides schema and commands for working with lists in ProseMirror editors. It includes functionality for handling cursor behavior within lists, which can be seen as somewhat similar to the gap cursor functionality provided by prosemirror-gapcursor.
FAQs
ProseMirror plugin for cursors at normally impossible-to-reach positions
The npm package prosemirror-gapcursor receives a total of 2,505,372 weekly downloads. As such, prosemirror-gapcursor popularity was classified as popular.
We found that prosemirror-gapcursor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.