
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@duskit/components
Advanced tools
[](https://github.com/dusk-network/duskit/actions/workflows/ci.yml) [](https://www.npmjs.com/package/
Svelte components to build a Dusk web application.
The dev environment assumes that you have at least Node.js v22.11.0 installed. The LTS version is 22.11.0 at the time of writing.
This package is part of the Duskit monorepo. Please refer to the main README for monorepo usage, changeset management and installation of dependencies.
Install it with your favourite package manager:
npm install @duskit/components --save
Import the components you need in your Svelte files:
<script>
import { Button } from "@duskit/components";
</script>
<Button text="Hi there" />
npm run checks - runs all health checks (formatting, linting, type checking, tests)npm run clean - removes the coverage and node_modules foldersnpm run format - fixes the formatting in all filesnpm run format:check - performs the formatting checknpm run lint - performs the linting checknpm run lint:fix - fixes, where possible, linting errorsnpm run test - runs the test suitenpm run test:coverage - runs the test suite and generates the code coverage report in the coverage foldernpm run test:watch - runs the test suite in watch modenpm run typecheck - runs the type checkernpm run typecheck:watch - runs the type checker in watch modeFAQs
[](https://github.com/dusk-network/duskit/actions/workflows/ci.yml) [](https://www.npmjs.com/package/
The npm package @duskit/components receives a total of 0 weekly downloads. As such, @duskit/components popularity was classified as not popular.
We found that @duskit/components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.