
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
react-native-canvas
Advanced tools
A Canvas component for React Native
npm install react-native-webview
react-native link react-native-webview
npm install react-native-canvas
import React, { Component } from 'react';
import Canvas from 'react-native-canvas';
class App extends Component {
handleCanvas = (canvas) => {
const ctx = canvas.getContext('2d');
ctx.fillStyle = 'purple';
ctx.fillRect(0, 0, 100, 100);
}
render() {
return (
<Canvas ref={this.handleCanvas}/>
)
}
}
Reflects the height of the canvas in pixels
Reflects the width of the canvas in pixels
Returns a canvas rendering context. Currently only supports 2d context.
Returns a Promise
that resolves to DataURL.
Standard CanvasRenderingContext2D. MDN. Only difference is await
should be used to retrieve values from methods.
const ctx = canvas.getContext("2d");
WebView Image constructor. Unlike in the browsers accepts canvas as first argument. MDN
const image = new Image(canvas, height, width);
Path2D API constructor. Unlike in the browsers, this requires the canvas as first argument. See also https://developer.mozilla.org/en-US/docs/Web/API/Path2D/Path2D.
const path = new Path2D(canvas);
FAQs
A Canvas component for React Native
The npm package react-native-canvas receives a total of 3,054 weekly downloads. As such, react-native-canvas popularity was classified as popular.
We found that react-native-canvas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.