
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
react-animated-numbers
Advanced tools
Library showing animation of number changes in react.js
| name | type | default | description |
|---|---|---|---|
| animateToNumber | number | none | Number to be animated |
| fontStyle | React.CSSProperties? | none | Style of number text |
| includeComma | boolean? | false | Whether the number contains commas |
| onStart | (): void? | undefined | Function executed when animation is started |
| onFinish | (): void? | undefined | Function executed when animation is finished (not support calm animation type) |
| configs | SpringConfig[]? | config.default | This module is using react-spring and you can refer to this config option. If you pass multiple settings, an animation is randomly assigned to each number. _ DO NOT USE duration because of a bug that hasn't been fixed yet_ |
animated-container to style container (example)fontStyle propimport React from "react";
import AnimatedNumbers from "./module";
import "./App.css";
function App() {
const [num, setNum] = React.useState(331231);
return (
<div className="container">
<AnimatedNumbers
includeComma
animateToNumber={num}
fontStyle={{ fontSize: 40 }}
onStart={() => console.log("onStart")}
onFinish={() => {
console.log("onFinish!");
}}
configs={[
{ mass: 1, tension: 220, friction: 100 },
{ mass: 1, tension: 180, friction: 130 },
{ mass: 1, tension: 280, friction: 90 },
{ mass: 1, tension: 180, friction: 135 },
{ mass: 1, tension: 260, friction: 100 },
{ mass: 1, tension: 210, friction: 180 },
]}
></AnimatedNumbers>
<div>
<button onClick={() => setNum((state) => state + 31234)}>+</button>
<button onClick={() => setNum((state) => state - 31234)}>-</button>
</div>
</div>
);
}
export default App;
}
FAQs
Library showing animation of number changes in react.js
The npm package react-animated-numbers receives a total of 17,591 weekly downloads. As such, react-animated-numbers popularity was classified as popular.
We found that react-animated-numbers demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.