
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
react-terminal-plus
Advanced tools
🚀 React component that renders and feels like a Terminal 🖥
Features • Installation • Usage • Props • Development • Credits
Ctrl + C. ⛔clear command or using Ctrl + L. 🧹npm install react-terminal-plus
OR
yarn add react-terminal-plus
OR
pnpm i react-terminal-plus
import { TerminalContextProvider, ReactTerminal } from "react-terminal-plus";
function App(props) {
// Define commands here
const commands = {
whoami: "jackharper",
cd: (directory) => `changed path to ${directory}`,
};
return (
<TerminalContextProvider>
<ReactTerminal commands={commands} />
</TerminalContextProvider>
);
}
The component comes with few in-built themes: light, dark, material-light, material-dark, material-ocean, matrix and dracula. You can also create custom themes by passing themes parameter in props, as follows:
<ReactTerminal
commands={commands}
themes={{
"my-custom-theme": {
themeBGColor: "#272B36",
themeToolbarColor: "#DBDBDB",
themeColor: "#FFFEFC",
themePromptColor: "#a917a8"
}
}}
theme="my-custom-theme"
/>
| name | description | default |
|---|---|---|
welcomeMessage | A welcome message to show at the start, before the prompt begins. Value can be either a string or JSX | null |
prompt | Terminal prompt | >>> |
commands | List of commands to be provided as a key value pair where value can be either a string, JSX/HTML tag or callback | null |
errorMessage | Message to show when unidentified command executed, can be either a string, JSX/HTML tag or callback | "not found!" |
enableInput | Whether to enable user input | true |
showControlBar | Whether to show the top control bar | true |
showControlButtons | Whether to show the control buttons at the top bar of the terminal | true |
theme | Theme of the terminal | "light" |
themes | Themes object to supply custom themes | null |
defaultHandler | Default handler to be used (if provided) when no commands match. Useful when you don't know list of commands beforehand/want to send them to server for handling. | null |
| command | description |
|---|---|
| clear | clears the console |
| cls | clears the console |
| shortcut | description |
|---|---|
| ctrl + c | copy OR cancel running command if there is no selected text |
| ctrl + v | paste |
| ctrl + l | clear the console |
| ctrl + a | moves the cursor to the beginning of the line |
| ctrl + e | moves the cursor to the end of the line |
| Home | moves the cursor to the beginning of the line |
| End | moves the cursor to the end of the line |
| ctrl + left-arrow | moves the cursor to the backward word |
| ctrl + right-arrow | moves the cursor to the forward word |
See .github/CONTRIBUTING.md, then .github/DEVELOPMENT.md.
Thanks! 💪
This repository resulted from a react-terminal fork, and as such we would like to thank all its contributors for creating such an amazing piece of OS software. 💖
FAQs
A improved version of `react-terminal` - react-terminal-plus
The npm package react-terminal-plus receives a total of 565 weekly downloads. As such, react-terminal-plus popularity was classified as not popular.
We found that react-terminal-plus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.