
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
react-firebase-ssr-boilerplate
Advanced tools
React app with server side rendering, code and styles splitting, i18n
React app boilerplate with server side rendering, code and styles splitting, multilingual i18n
npm install react-firebase-ssr-boilerplate
Install npm dependencies in the root folder.
Run: npm install
Install npm dependencies in the functions folder (needed for firebase environment).
Run: cd functions && npm install && cd ../
Add your config to /firebase-config.json
Add alias and projectId to /.firebaserc
Add service account data to /server/site/middleware/service-account.json
If you using firestore (if not just skip this step) - uncomment imports and functions in
/site/client/redux/store/index.js and use firestoreConnect where you need, for example
in /site/client/pages/ChatPage/Chat/Chat.js
After initial installation you can start the project in development mode:
npm run site:dev
You can build the project and run it with server side rendering:
npm run site:startnpm run site:build && cd functions && firebase serveOr you can deploy the app to the firebase hosting:
npm run site:build && cd functions && firebase deploy
Based on react-intl. Translation switches on change
store property state.me.locale.
All translations defines in messages.js file in the root of each component.
Based on react-loadable and splits code for each page in routes.
Based on mini-css-extract-plugin which splits styles for each page and media-query-splitting-plugin which splits styles by media query (mobile, tabletLandscape, tabletPortrait and desktop).
Based on react-helmet which allows to manage SEO tags (title, meta etc)
FAQs
React app with server side rendering, code and styles splitting, i18n
We found that react-firebase-ssr-boilerplate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.