
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
slick-react-multiselect-dropdown
Advanced tools
slick design lightweight multiple selection dropdown component
A very lightweight
and simple multiple selection dropdown component with search
npm i slick-react-multiselect-dropdown # npm
yarn add slick-react-multiselect-dropdown # yarn
const listItems = [
{ label: "Apple 🍎", key: "apple" },
{ label: "Unicorn 🦄", key: "unicorn" },
{ label: "Burger 🍔", key: "burder" },
{ label: "Cheers 🥂", key: "cheers" },
];
const [selectedItem, setSelectedItem] = useState([]);
<MultiSelect
placeholder="Select from list"
list={listItems}
selectedItems={selectedItem}
setSelectedItems={setSelectedItem}
/>
color values for selected Items could be in all css accepted formats. such as #cece
rgb(254 242 242)
green
const colorSelectedItem = {
{ border: "red", background: "rgb(254 242 242)" }
}
<MultiSelect
placeholder="Select from list"
list= {listItems}
selectedItems= {selectedItem}
setSelectedItems= {setSelectedItem}
colorSelectedItem= {colorSelectedItem}
/>
export type Item = { label: string; key: string };
export type IProps = {
placeholder?: string;
list: Item[];
selectedItems: Item[];
setSelectedItems: any;
enableSearch?: boolean;
colorSelectedItem?: { border: string; background: string };
selectBoxcss?: {}; // any inline css properties e.g selectBoxcss={{padding: '.2rem'}}
};
FAQs
slick design lightweight multiple selection dropdown component
The npm package slick-react-multiselect-dropdown receives a total of 2 weekly downloads. As such, slick-react-multiselect-dropdown popularity was classified as not popular.
We found that slick-react-multiselect-dropdown demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.