
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
react-native-apxor-rtm-plugin
Advanced tools
React Native wrapper for Apxor RTM Plugin which includes support for deep linking.
@react-navigation, walkthroughs will not work as expected. In that case, you must log navigation events manually by using RNApxorSDK.logNavigationEvent APIFirst integrate
react-native-apxor-sdkfrom here.
Run the following command
$ npm install react-native-apxor-rtm-plugin --save
$ react-native link react-native-apxor-rtm-plugin
Open up android/app/src/main/java/[...]/MainActivity.java
import com.apxor.reactnativesdk.plugins.RNApxorRTMPackage; to the imports at the top of the filenew RNApxorRTMPackage() to the list returned by the getPackages() method@Override
protected List<ReactPackage> getPackages() {
return Arrays.<ReactPackage>asList(
new MainReactPackage(),
...
new RNApxorSDKPackage(), <- ApxorSDK package
new RNApxorRTMPackage(), <- ApxorRTM plugin
...
);
}
Run the following command
$ yarn add react-native-apxor-rtm-plugin
android/app/build.gradle: compile project(':react-native-apxor-rtm-plugin')
// Ignore this dependency, if you have already added this when integrating `react-native-apxor-sdk`
implementation 'com.apxor.androidx:apxor-android-sdk-qe:1.5.0@aar'
implementation 'com.apxor.androidx:apxor-android-sdk-rtm:1.8.7@aar'
Create plugins.json file at android/app/src/main/assets/ folder. If you already done this step, please ignore
Add the following JSON in that file
{
"plugins": [
{
"name": "rtm",
"class": "com.apxor.androidsdk.plugins.realtimeui.ApxorRealtimeUIPlugin"
}
// Other Apxor plugins
]
}
Apxor RTM plugin will show Inline messages (also called as Tooltips) and CoachMark messages for a given View ID/Tag. In React Native apps, you can mention View IDs for views.
For example, you want to show tooltip for a button. You can't directly give a unique id for Button. Instead, you need to wrap it up with a View tag like:
<View nativeID="loginButton">
<Button onPress={this.handlePress}>Login</Button>
</View>
So, the same value for nativeID attribute can be configured in Apxor dashboard to identify the Button at Runtime.
FAQs
React Native wrapper for Apxor RTM plugin
The npm package react-native-apxor-rtm-plugin receives a total of 131 weekly downloads. As such, react-native-apxor-rtm-plugin popularity was classified as not popular.
We found that react-native-apxor-rtm-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.