
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@avatune/miniavs-theme
Advanced tools
Avatar theme for Avatune using miniavs design assets.
npm install @avatune/miniavs-theme
This theme is available for multiple frameworks: React, Vue, Svelte, Angular, and Vanilla JavaScript.
import { Avatar } from '@avatune/react'
import theme from '@avatune/miniavs-theme/react'
function App() {
return (
<Avatar
theme={theme}
size={300}
seed="optional-seed-for-random-generation"
/>
)
}
<script setup lang="ts">
import { Avatar } from '@avatune/vue'
import theme from '@avatune/miniavs-theme/vue'
</script>
<template>
<Avatar
:theme="theme"
:size="300"
seed="optional-seed-for-random-generation"
/>
</template>
<script lang="ts">
import { Avatar } from '@avatune/svelte'
import theme from '@avatune/miniavs-theme/svelte'
</script>
<Avatar
theme={theme}
size={300}
seed="optional-seed-for-random-generation"
/>
import { Component } from '@angular/core'
import { Avatar } from '@avatune/angular'
import theme from '@avatune/miniavs-theme/angular'
@Component({
selector: 'app-root',
standalone: true,
imports: [Avatar],
template: `
<avatune-avatar
[theme]="theme"
[inputSize]="300"
seed="optional-seed-for-random-generation"
/>
`,
})
export class AppComponent {
theme = theme
}
import { avatar } from '@avatune/vanilla'
import theme from '@avatune/miniavs-theme/vanilla'
const container = document.getElementById('avatar-container')
const svg = avatar({
theme,
size: 300,
seed: 'optional-seed-for-random-generation',
})
container?.appendChild(svg)
You can override specific avatar parts:
<Avatar
theme={theme}
size={300}
hair="baldness" // Choose specific hair style
hairColor="#FF5733" // Custom hair color
body="standard" // Choose specific clothing
bodyColor="#3498DB" // Custom clothing color
/>
This theme uses assets from the @avatune/miniavs-assets package.
This theme package is licensed under MIT (see LICENSE.md).
The design assets used in this theme have their own license and attribution:
This project uses avatar design assets licensed under CC BY 4.0.
Original designs by Webpixels. Modifications were made to adapt them for composable SVG avatars.
For full details, see:
@avatune/miniavs-assets@avatune/miniavs-assets - SVG assets used by this theme@avatune/react - React avatar renderer@avatune/vue - Vue avatar renderer@avatune/svelte - Svelte avatar renderer@avatune/angular - Angular avatar renderer@avatune/vanilla - Vanilla JavaScript avatar renderer# Build the theme
bun run build
# Build in watch mode
bun run dev
# Type checking
bun run check-types
FAQs
Unknown package
We found that @avatune/miniavs-theme demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.