
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
react-native-polyfill
Advanced tools
Polyfill newer JS features. Primarily targeted at older phones (for example, iOS 8) that will still run React Native. This library mutates JavaScript's built-in objects and should be used judiciously.
Some JS engines that are targeted by React Native, particularly iOS 8 and, to a lesser extent, Android 6, are missing some of the new ES2015 functions and they may not be polyfilled by a typical build system.
This leads to errors that look like this:
Unhandled JS Exception: undefined is not a function (evaluating ‘Number.parseInt’)
A lot of these functions are the ones that existed in prior versions of JavaScript but were added to the Number object to namespace them. For example:
parseInt('20', 10); // existing JavaScript function
Number.parseInt('20', 10); // the 'new' way of accessing the same function as of ES2015
npm install --save react-native-polyfill
To use the entire package and mutate the base objects, simply import or require the package:
import 'react-native-polyfill';
require('react-native-polyfill');
If you only want the Array or Number polyfills, you can include just one:
import 'react-native-polyfill/src/Array';
require('react-native-polyfill/src/Array');
If you just want a single function or you want to limit the number of changes to the base object, you can access the functions directly:
const includes = require('react-native-polyfill/src/Array/includes');
Where available, this project has used the MDN polyfills or a close variation.
Importing this package into your project will mutate the prototype of JavaScript's base objects, if those objects do not already support the functionality. The decision to mutate these base objects in your code base should not be taken lightly. The polyfills in this package should be relatively low risk as they do not change prototypes in JavaScript engines that already implement the functions.
More information about this topic can be found at: http://mcculloughwebservices.com/2016/11/29/adding-support-es2015-number-methods/
FAQs
Polyfill newer JS features. Primarily targeted at older phones (for example, iOS 8) that will still run React Native. This library mutates JavaScript's built-in objects and should be used judiciously.
The npm package react-native-polyfill receives a total of 189 weekly downloads. As such, react-native-polyfill popularity was classified as not popular.
We found that react-native-polyfill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.