
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@aboutbits/react-ui-integrations
Advanced tools
This is a collection of tools for various libraries to integrate About Bit's ReactUI into a project.
Install the package
npm install -D @aboutbits/react-ui-integrations
Add a reactui.config.js to your project's directory
See Configuration for available options.
module.exports = {
theme: {
[...]
}
}
Pass the REACTUI_THEME to your ReactUIProvider instance:
import { ReactUIProvider, Theme } from '@aboutbits/react-ui'
import React from 'react'
declare const REACTUI_THEME: Theme
export const Layout: React.FC = ({ children }) => {
return <ReactUIProvider theme={REACTUI_THEME}>{children}</ReactUIProvider>
}
Configure the Tailwind CSS plugin
tailwind.config.js:
module.exports = {
plugins: [
// Basic configuration
require('@aboutbits/react-ui-integrations').useTailwindPlugin(),
// Configuration with custom config file
require('@aboutbits/react-ui-integrations').useTailwindPlugin({
configFile: resolve('./reactui_custom.config.js'),
}),
],
}
Optional configuration options
configFile: Absolute path to an alternative configuration fileConfigure the respective library in your project
See Supported libraries.
next.config.js:
const { withReactUI } = require('@aboutbits/react-ui-integrations')
let nextConfig = {} // your NextJS config
// Basic configuration
nextConfig = withReactUI(nextConfig)
// Configuration with custom theme variable and config file
nextConfig = withReactUI(nextConfig, {
themeVariable: 'REACTUI_THEME_CUSTOM',
configFile: path.resolve('./reactui_custom.config.js'),
})
module.exports = nextConfig
Optional configuration options
themeVariable: Configure the variable name to which the ReactUI theme will be bound (by Webpack's DefinePlugin).configFile: Absolute path to an alternative configuration filewebpack.config.js:
const { ReactUIWebpackPlugin } = require('@aboutbits/react-ui-integrations')
module.exports = {
plugins: [
// Basic configuration
new ReactUIWebpackPlugin(),
// Configuration with custom theme variable and config file
new ReactUIWebpackPlugin({
themeVariable: 'REACTUI_THEME_CUSTOM',
configFile: path.resolve('./reactui_custom.config.js'),
}),
],
}
Optional configuration options
themeVariable: Configure the variable name to which the ReactUI theme will be bound (by Webpack's DefinePlugin).configFile: Absolute path to an alternative configuration filewebpack.config.js:
const { getTheme } = require('@aboutbits/react-ui-integrations')
module.exports = {
globals: {
REACTUI_THEME: getTheme(),
},
}
Optional configuration options
configFile: Absolute path to an alternative configuration fileThese configuration options are available to be set in the reactui.config.js:
theme
Extend ReactUI theme configuration. Will be merged with the ReacUI's default theme configuration.
To publish the package commit all changes and push them to main. Then run one of the following commands locally:
npm version patch
npm version minor
npm version major
About Bits is a company based in South Tyrol, Italy. You can find more information about us on our website.
For support, please contact info@aboutbits.it.
The MIT License (MIT). Please see the license file for more information.
FAQs
Webpack and Tailwind integration for ReactUI
We found that @aboutbits/react-ui-integrations demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A malicious package uses a QR code as steganography in an innovative technique.

Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.

Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.