
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
react-native-square-in-app-payments
Advanced tools
An open source React Native plugin for calling Square’s native In-App Payments SDK to take in-app payments on iOS and Android.
The In-App Payments plugin for Square In-App Payments SDK is a wrapper for the native Android and iOS SDKs and supports the following native In-App Payments SDK versions:
1.6.3
1.6.6
In addition to this README, the following is available in the React Native plugin GitHub repo:
docs
- Root directory for all documentation.react-native-in-app-payments-quickstart
- Root directory of the React Native sample app (with walkthrough).Copyright 2022 Square Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
v1.7.6 Jun 03, 2024
1.6.6
and for iOS 1.6.3
.FAQs
An open source React Native plugin for calling Square’s native In-App Payments SDK to take in-app payments on iOS and Android.
The npm package react-native-square-in-app-payments receives a total of 1,376 weekly downloads. As such, react-native-square-in-app-payments popularity was classified as popular.
We found that react-native-square-in-app-payments demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 18 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.