
Research
/Security News
5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.
@asphalt-react/card
Advanced tools
A card is container to display related pieces of information in a single unit. Cards also provide summary of the information and a linked entry point to further details of that content.
Few uses of cards are to show movie titles on an OTT platform, product on an ecommerce website, feed of posts or articles on a website.
There are two variants:
Outlined (default): Outline cards renders an outline border. When you have a big collection choose outline cards for less visual clutter.
Elevated: Elevated cards renders a drop shadow to make the card visually raise from the parent surface. Use elevated cards when the content needs more emphasises.
import Card from "@asphalt-react/card"
function App() {
return (
<Card>
<div></div>
</Card>
)
}
Card content
| type | required | default |
|---|---|---|
| node | true | N/A |
Renders elevated card
| type | required | default |
|---|---|---|
| bool | false | N/A |
DEPRECATED
The card is outlined by default. We'll remove this prop in the next major release.
Renders outline card.
| type | required | default |
|---|---|---|
| bool | false | N/A |
Stretches the card to it's container width
| type | required | default |
|---|---|---|
| bool | false | N/A |
FAQs
Card
The npm package @asphalt-react/card receives a total of 236 weekly downloads. As such, @asphalt-react/card popularity was classified as not popular.
We found that @asphalt-react/card demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.

Security News
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.

Research
/Security News
Mixed-script homoglyphs and a lookalike domain mimic imToken’s import flow to capture mnemonics and private keys.