
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
react-native-icon
Advanced tools
Automatic icon resizing for React Native. Inspired by cordova-icon.
This simple tool allows you to create a single icon in your react-native project, then create icons of all required sizes from it. It currently works for iOS and Android.
This project is inspired by Alex Disler's superb cordova-icon project.
Install with:
npm install react-native-icon
You will need imagemagick installed:
brew install imagemagick # OSX
sudo apt-get install imagemagick # Debian/Ubuntu/etc
sudo yum install imagemagick # CentOS/etc
Add an icon named icon.png
to your project root. Then run:
./node_modules/.bin/react-native-icon
The image should be at least 192x192 pixels and square.
If an iOS project is present, then the icon will be copied at all required sizes to:
./ios/<ProjectName>/Images.xcassets/AppIcon.appiconset
If an Android project is present, then the icon will be copied at all required sizes to:
./android/app/src/main/res
MIT
FAQs
Automatic icon resizing for React Native. Inspired by cordova-icon.
The npm package react-native-icon receives a total of 2 weekly downloads. As such, react-native-icon popularity was classified as not popular.
We found that react-native-icon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.