
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@_tw/typography
Advanced tools
A Tailwind CSS plugin that adapts Tailwind Typography styles for the WordPress block editor.
A Tailwind CSS plugin created for _tw that improves support for Tailwind Typography within the WordPress block editor by:
@tailwindcss/typography
is-style-lead
class alongside lead
so that it can be used as a block styleThe version number of this plugin will be kept in sync with that of Tailwind Typography itself, as it will need to be tested for compatibility with each new Tailwind Typography release due to tight coupling with Tailwind Typography’s own code.
@_tw/typography
must be included in place of @tailwindcss/typography
, not alongside it:
// tailwind.config.js
plugins: [
// Add Tailwind Typography.
require('@_tw/typography'),
]
@_tw/typography
supports the same options as @tailwindcss/typography
:
// tailwind.config.js
plugins: [
// Add Tailwind Typography styles with a custom class name.
require('@_tw/typography')({
className: 'wysiwyg',
}),
]
FAQs
A Tailwind CSS plugin that adapts Tailwind Typography styles for the WordPress block editor.
The npm package @_tw/typography receives a total of 785 weekly downloads. As such, @_tw/typography popularity was classified as not popular.
We found that @_tw/typography demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.