
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
stringee-react-native-v2
Advanced tools
The Stringee communication platform makes it easy to embed high-quality interactive video, voice, SMS into webs and mobile apps.
For Expo project you need to enable and generate the native code in your project by running
$ npx expo prebuild
More detail about Expo prebuild
Install stringee-react-native-v2 by running:
$ npm install stringee-react-native-v2 --save
Note Please make sure to have CocoaPods on your computer.
In you terminal, change into your ios directory.
Now run, pod install
Open XCode
Open <YourProjectName>.xcworkspace file in XCode. This file can be found in the ios folder of your React Native project.
In the "Build Settings" tab -> "Other linker flags" add "$(inherited)" flag.
In the "Build Settings" tab -> "Enable bitcode" select "NO".
Right-click the information property list file (Info.plist) and select Open As -> Source Code.
Insert the following XML snippet into the body of your file just before the final element:
<key>NSCameraUsageDescription</key>
<string>$(PRODUCT_NAME) uses Camera</string>
<key>NSMicrophoneUsageDescription</key>
<string>$(PRODUCT_NAME) uses Microphone</string>
Open up android/app/proguard-rules.pro and add following lines:
# WebRTC
-keep class org.webrtc.** { *; }
-dontwarn org.webrtc.**
-keepclassmembers class org.webrtc.** { *; }
# JNI
-keepclasseswithmembernames class * {
native <methods>;
}
-keep class org.jni_zero.** { *; }
# Stringee
-dontwarn com.stringee.**
-keep class com.stringee.** { *; }
The Stringee Android SDK requires some permissions from your AndroidManifest
Open up android/app/src/main/AndroidManifest.xml
Add the following lines:
<!-- Internet -->
<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
<uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
<!-- Record -->
<uses-permission android:name="android.permission.RECORD_AUDIO" />
<!-- Audio -->
<uses-permission android:name="android.permission.MODIFY_AUDIO_SETTINGS" />
<!-- Camera -->
<uses-permission android:name="android.permission.CAMERA" />
<uses-feature
android:name="android.hardware.camera"
android:required="true" />
<uses-feature
android:name="android.hardware.camera.autofocus"
android:required="false" />
<!-- Bluetooth -->
<uses-permission android:name="android.permission.BLUETOOTH" />
<uses-permission android:name="android.permission.BLUETOOTH_CONNECT" /> <!-- Require for android 12 or higher -->
<uses-feature
android:name="android.hardware.bluetooth"
android:required="false" />
<uses-feature
android:name="android.hardware.bluetooth_le"
android:required="false" />
<!-- Graphic -->
<uses-feature
android:glEsVersion="0x00020000"
android:required="false" />
Open up android/app/build.gradle
Add the following lines:
dependencies {
implementation 'com.stringee.sdk.android:stringee-android-sdk:2.1.5'
implementation 'io.github.webrtc-sdk:android:137.7151.03'
implementation 'com.android.volley:volley:1.2.1'
}
To migrate an existing app to stringee-react-native-v2, follow Migrate to stringee-react-native-v2.
FAQs
The Stringee communication platform makes it easy to embed high-quality interactive video, voice, SMS into webs and mobile apps.
We found that stringee-react-native-v2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.