
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
react-router-template-link
Advanced tools
An intelligent link component above <a> element and <NavLink> from react-router. Also, it allows you to create link component from url template with type inference.
Inspired and strongly based on react-omni-link
English | 中文
import createFactory from 'react-router-template-link'
const {Link, createLink} = createFactory();
const UserLink = createLink<{userId: string}>('/user/{userId}');
<UserLink userId="xxx" />
const url = UserLink.toUrl({userId: 'xxx'});
// or use directly
<Link to="/user/xxx" />
createFactory accept some options listed below:
const {Link, createLink} = createFactory(options);
{string} options.basename: In some case Link is not under BrowserRouter which needs basename. It should only be equal to the basename of BrowserRouter, or it will lead to bugs. Default as ''
{Regexp} options.interpolate: Default as /{(\w+)}/g
{function} options.isExternal: A function to tell whether the link is external or not. External link will be open in new Tab. Default as when to.includes('://'') || to.startsWith('mailto:') returns true
{boolean} options.encodePathVariable: Configure whether pathVariable should be encoded. Such as encode a/b to a%2fb. Default as false
{boolean} options.encodeQueryVariable: Configure whether queryVariable should be encoded. Such as encode a/b to a%2fb. Default as true
{ReactNode} options.externalIcon: Show Icon when link is external. Default as null
Link or TemplatedLink accepts some props listed below:
{boolean} blank: Whether link opens in a new window. An external link will always open in a new window, which is determined by isExternal option.
className, style, children: Same as react-router-dom, When link is external, isActive will be considered as false
onClick, & others: Same as a
{string} hash: Add hash to TemplatedLink.
FAQs
react-router-template-link
We found that react-router-template-link demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.