
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
react-native-v8
Advanced tools
This project aims to support V8 replacement runtime for React Native. Designed as opt-in package, it is easy to integrate with existing React Native projects.
Note From react-native-v8 2.0, the minimum requirement for react-native is 0.71.2.
For earlier versions, please check out the older readmes.
For managed projects, you can install through the single command:
$ npx expo install react-native-v8 v8-android-jit
"android.jsEngine": "jsc".For bare projects, you can run npx expo prebuild -p android --clean after the installation to prebuild again.
react-native-v8 and a v8-android variant. For example, the v8-android-jit:$ yarn add react-native-v8 v8-android-jit
--- a/android/app/build.gradle
+++ b/android/app/build.gradle
@@ -161,11 +161,18 @@ android {
}
}
}
+
+ packagingOptions {
+ // Make sure libjsc.so does not packed in APK
+ exclude "**/libjsc.so"
+ }
}
MainApplication.java.--- a/android/app/src/main/java/com/rn071/MainApplication.java
+++ b/android/app/src/main/java/com/rn071/MainApplication.java
@@ -1,15 +1,20 @@
package com.rn071;
import android.app.Application;
+
import com.facebook.react.PackageList;
import com.facebook.react.ReactApplication;
import com.facebook.react.ReactNativeHost;
import com.facebook.react.ReactPackage;
+import com.facebook.react.bridge.JavaScriptExecutorFactory;
import com.facebook.react.defaults.DefaultNewArchitectureEntryPoint;
import com.facebook.react.defaults.DefaultReactNativeHost;
+import com.facebook.react.modules.systeminfo.AndroidInfoHelpers;
import com.facebook.soloader.SoLoader;
import java.util.List;
+import io.csie.kudo.reactnative.v8.executor.V8ExecutorFactory;
+
public class MainApplication extends Application implements ReactApplication {
private final ReactNativeHost mReactNativeHost =
@@ -42,6 +47,15 @@ public class MainApplication extends Application implements ReactApplication {
protected Boolean isHermesEnabled() {
return BuildConfig.IS_HERMES_ENABLED;
}
+
+ @Override
+ protected JavaScriptExecutorFactory getJavaScriptExecutorFactory() {
+ return new V8ExecutorFactory(
+ getApplicationContext(),
+ getPackageName(),
+ AndroidInfoHelpers.getFriendlyDeviceName(),
+ getUseDeveloperSupport());
+ }
};
@Override
--- a/android/gradle.properties
+++ b/android/gradle.properties
@@ -41,4 +41,4 @@ newArchEnabled=false
# Use this property to enable or disable the Hermes JS engine.
# If set to false, you will be using JSC instead.
-hermesEnabled=true
+hermesEnabled=false
yarn android
You can verify whether it works by evaluating the global._v8runtime().version JavaScript statement.
global._v8runtime() has some builtin information such as v8 version.
console.log(`V8 version is ${global._v8runtime().version}`);
Please note that global._v8runtime() existed only for V8 enabled environment but not React Native remote debugging mode.
For remote debugging mode, the JavaScript actually runs on Chrome from your host and there is no V8Runtime.
react-native-v8 depends on a V8 shared library built from v8-android-buildscripts. v8-android-jit is the recommended V8 variant. This is a full featured V8 with both JIT and Intl. We provide other V8 variants to fulfill your needs.
For instance, if you want to reduce memory usage, the non JIT variant, aka V8 lite mode.
For detailed V8 features, please check the v8-android-buildscripts feature flags.
| Package name | JIT | Intl |
|---|---|---|
v8-android-jit | Yes | Yes |
v8-android-jit-nointl | Yes | No |
v8-android | No | Yes |
v8-android-nointl | No | No |
You could try the experimental ios support on an Expo project which SDK version is greater or equal to 48.
For managed projects, you can install through the single command:
$ npx expo install react-native-v8 v8-ios
"ios.jsEngine": "jsc".For bare projects, you can run npx expo prebuild -p ios --clean after the installation to prebuild again.
The V8 currently bundled by default supports Intl and the ICU data costs about 7MiB per ABI. If you are not going to use Intl, you could use no-Intl version to reduce APK size. (jsc-android have no Intl by default)
Performance comparison with JavaScriptCore in React Native
Please check https://github.com/Kudo/react-native-js-benchmark for the benchmark and result
V8 inspector integration
V8 snapshot integration
V8 code cache experiment
FAQs
Opt-in V8 runtime for React Native Android
The npm package react-native-v8 receives a total of 4,613 weekly downloads. As such, react-native-v8 popularity was classified as popular.
We found that react-native-v8 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.