
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
react-ajala
Advanced tools
checkout ajala.js here
npm i react-ajala
import { AjalaJourneyProvider } from "react-ajala";
import YourComponent from "./where-ever-it-kept";
import "ajala.js/dist/ajala.css";
function App() {
return (
<AjalaJourneyProvider
steps={[
{
target: ".random",
id: "1",
title: "Step 2 Title",
content: "step 2 content lorem ipson",
tooltip_placement: "left_top",
enable_target_interaction: true,
},
]}
>
<YourComponent />
</AjalaJourneyProvider>
);
}
Please note: That you only need import "ajala.js/dist/ajala.css";
when you are using ajala default tooltip, you don't need it if you provide your own CustomTooltip
component.
Property | Type | Description |
---|---|---|
steps | TStep | An array of object that's passed down as ajala.js steps, for a full description of this props please check ajala.js doc here |
options | TAjalaOptions | An object that's passed down to to customize ajala.js, for a full description of this props please check ajala.js doc here |
CustomTooltip | JSX.Element or ReactNode | A React component that get's render as ajala.js custom_tooltip , this component will accept a prop of TReactAjalaCustomTooltipProps which is the active step and an ajala instance |
CustomArrow | JSX.Element or ReactNode | A React component that get's render as ajala.js custom_arrow . |
getInstance | Function | A callback function that gets called with ajala.js instance, can be used to get ajala instance at the parent file where AjalaJourneyProvider is being used. |
react-ajala also export a useAjalaJourneyContext
hook that can be used to get ajala instance down your component tree. Please note that your component must be wrapped with AjalaJourneyProvider
to use useAjalaJourneyContext
useAjalaJourneyContext
import { useAjalaJourneyContext } from "react-ajala";
function YourComponentWrappedWithAjalaJourneyProvider() {
const ajalaInstance = useAjalaJourneyContext();
return <div> ...Some content </div>;
}
CustomTooltip
and CustomArrow
import { AjalaJourneyProvider } from "react-ajala";
import YourComponent from "./where-ever-it-kept";
import YourCustomTooltipComponent from "./where-ever-it-kept";
import YourCustomArrowComponent from "./where-ever-it-kept";
function App() {
return (
<AjalaJourneyProvider
steps={[
{
target: ".random",
id: "1",
title: "Step 2 Title",
content: "step 2 content lorem ipson",
},
]}
CustomTooltip={YourCustomTooltipComponent}
CustomArrow={YourCustomArrowComponent}
>
<YourComponent />
</AjalaJourneyProvider>
);
}
export interface TReactAjalaCustomTooltipProps {
active_step: TSteps | undefined | null;
ajala: AjalaJourney | null;
}
Feel free to submit pull requests, create issues or spread the word.
MIT © Adeyanju Adeyemi
FAQs
### A lightweight React wrapper built around ajala.js
The npm package react-ajala receives a total of 147 weekly downloads. As such, react-ajala popularity was classified as not popular.
We found that react-ajala demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.