
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
victory-native
Advanced tools
Victory Native XL is set to replace the current stable version. However, please be advised that it's currently in a pre-production release (beta stage). While many of the new features and improvements are exciting, there might still be some shifts in APIs or bugs that need to be ironed out. We encourage users to test it and provide feedback, but also to be cautious and avoid using it in critical production environments until it has been further stabilized. Your feedback and contributions during this phase will be invaluable in ensuring the robustness of the next stable release.
Start by installing the peer dependencies of victory-native
– React Native Reanimated, Gesture Handler, and Skia:
yarn add react-native-reanimated react-native-gesture-handler @shopify/react-native-skia
For Reanimated, you'll need to add "react-native-reanimated/plugin"
to your plugins
list in your babel.config.js
config file.
Then install victory-native@next
:
yarn add victory-native@next
To get started and read more about the API, view the docs here.
MIT
Active: Formidable is actively working on this project, and we expect to continue for work for the foreseeable future. Bug reports, feature requests and pull requests are welcome.
FAQs
[](https://commerce.nearform.com/open-source/victory-native/)
The npm package victory-native receives a total of 108,316 weekly downloads. As such, victory-native popularity was classified as popular.
We found that victory-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.