
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
react-searchkit
Advanced tools
React-SearchKit is a React library that allows you to build in an easy way your search application.
Main features:

You can find a collection of examples in the src/demos folder:
Install dependencies and run the React app to try them out (see steps below).
To run the OpenSearch backend for the demo, you can use Docker. A docker-compose file with ES 7 and nginx as reverse proxy is available and ready to use.
Run the services:
cd src/demos/opensearch/docker
docker-compose up
Then, init the demo data:
curl -XPUT 'http://localhost:9200/random?pretty' -H 'Content-Type: application/json' -d @os2-mappings.json
curl -XPOST 'http://localhost:9200/random/_bulk' -H 'Content-Type: application/json' --data-binary @os-random-data.json
curl -XGET 'http://localhost:9200/random/_count?pretty'
Demo data have been randomly generated using https://next.json-generator.com.
Delete data in the cluster:
curl -X DELETE 'http://localhost:9200/_all'
React-SearchKit uses create-react-app as development toolkit.
Install the library:
npm install
Start the demo application:
npm start
The library uses Jest as test runner. To run the tests:
npm test
The library uses rollup to build a final version inside the /dist folder and it will build CommonJS and ES Modules versions:
npm run build
FAQs
React components to build your search UI application
The npm package react-searchkit receives a total of 944 weekly downloads. As such, react-searchkit popularity was classified as not popular.
We found that react-searchkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.