
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
react-highlighter
Advanced tools
Highlight select fragments of a string using an HTML element and/or a class.
npm install react-highlighter --save
var Highlight = require('react-highlighter');
<Highlight search="brown">The quick brown fox jumps over the lazy dog</Highlight>
search
: The string of text (or Regular Expression) to highlightcaseSensitive
: Determine whether string matching should be case-sensitive. Not applicable to regular expression searches. Defaults to false
ignoreDiacritics
: Determine whether string matching should ignore diacritics. Defaults to false
diacriticsBlacklist
: These chars are treated like characters that don't have any diacritics. Not applicable ignoreDiacritics is false
. Defaults to nonematchElement
: HTML tag name to wrap around highlighted text. Defaults to mark
matchClass
: HTML class to wrap around highlighted text. Defaults to highlight
matchStyle
: Custom style for the match element around highlighted text.Using Mocha/Chai/React.addons.TestUtils for testing.
npm test
Generate a report using Istanbul to make sure your tests are touching everything! FYI, Travis will fail the build if there isn't at least 90% of statement coverage and 100% function coverage.
npm run coverage
Coveralls.io integration requires that the environment variable COVERALLS_REPO_TOKEN
is set.
FAQs
Highlight select fragments of texts
The npm package react-highlighter receives a total of 30,796 weekly downloads. As such, react-highlighter popularity was classified as popular.
We found that react-highlighter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.