
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
A pure front-end spreadsheet component with Excel-like capabilities, built-in native AI workflows, and flexible LLM integration for data operations.
A pure front-end spreadsheet component with Excel-like capabilities, built-in native AI workflows, and flexible LLM integration for data operations.
English | 简体中文
SheetNext can be integrated with just a few lines of code and works with any front-end framework (Vue, React, Angular, etc.).
npm install sheetnext
<!-- Container for the editor -->
<div id="SNContainer" style="width:100vw;height:100vh;padding:0 7px 7px"></div>
import SheetNext from 'sheetnext';
import 'sheetnext.css';
const SN = new SheetNext(document.querySelector('#SNContainer'));
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>SheetNext Demo</title>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/sheetnext/dist/sheetnext.css">
</head>
<body>
<div id="SNContainer" style="width:100vw;height:100vh;padding:0 7px 7px"></div>
<script src="https://cdn.jsdelivr.net/npm/sheetnext/dist/sheetnext.umd.js"></script>
<script>
const SN = new SheetNext(document.querySelector('#SNContainer'));
</script>
</body>
</html>
The default language is English (en-US). A built-in Chinese (zh-CN) locale is available.
Import locale via npm:
import SheetNext from 'sheetnext';
import zhCN from 'sheetnext/locales/zh-CN.js';
SheetNext.registerLocale('zh-CN', zhCN);
const SN = new SheetNext(document.querySelector('#SNContainer'), {
locale: 'zh-CN'
});
Import locale via CDN:
<script src="https://cdn.jsdelivr.net/npm/sheetnext/dist/sheetnext.umd.js"></script>
<script src="https://cdn.jsdelivr.net/npm/sheetnext/dist/sheetnext.locale.zh-CN.umd.js"></script>
<script>
const SN = new SheetNext(document.querySelector('#SNContainer'), {
locale: 'zh-CN'
});
</script>
docs/skill/sheetnext-dev/.docs/skill/sheetnext-dev/references/ in the repository.docs/skill/sheetnext-dev/references/core-api.md, docs/skill/sheetnext-dev/references/events.md, and docs/skill/sheetnext-dev/references/enums.md.docs/skill/sheetnext-dev/references/ai-relay.md and docs/skill/sheetnext-dev/references/json-format.md.references to Your AI ToolFor Codex, copy the generated skill into your Codex skills directory, then restart Codex:
Copy-Item -Recurse -Force .\docs\skill\sheetnext-dev "$env:USERPROFILE\.codex\skills\sheetnext-dev"
For Cursor / Claude / ChatGPT / Copilot or any AI coding assistant, provide the docs/skill/sheetnext-dev/references/ reference set first, then describe your requirements.
Recommended prompt template:
You are a senior SheetNext AI development expert. Please read and understand the documentation I provide, then give a directly implementable solution.
Execution order:
1) Read: docs/skill/sheetnext-dev/references/core-api.md
2) Read as needed: docs/skill/sheetnext-dev/references/events.md, docs/skill/sheetnext-dev/references/enums.md, docs/skill/sheetnext-dev/references/ai-relay.md, and docs/skill/sheetnext-dev/references/json-format.md
3) Identify user goals (business goals + technical goals)
4) Output a minimum viable implementation (get it running first, then optimize)
5) All APIs and code must strictly follow the documentation
6) Provide verification steps and risk points
Constraints:
- Do not fabricate APIs
- Do not skip edge cases
- Prioritize reusing existing capabilities, avoid over-engineering
For example:
| Chrome | Firefox | Safari | Edge |
|---|---|---|---|
| 80+ | 75+ | 13+ | 80+ |
Apache-2.0. See LICENSE.
FAQs
A pure front-end spreadsheet component with Excel-like capabilities, built-in native AI workflows, and flexible LLM integration for data operations.
The npm package sheetnext receives a total of 25 weekly downloads. As such, sheetnext popularity was classified as not popular.
We found that sheetnext demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.