
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
@epilot360/icons
Advanced tools
[](#) [](https://www.npmjs.com/package/@epilot360/icons)
Curated set of epilot icons based on material-symbols.
yarn add @epilot360/icons
View full list of icons in our Storybook Documentation.
The @epilot360/icons package is shipped as an external system module in the 360 portal.
You can import any icon as a React component by name:
import { Edit as EditIcon, EpilotIcon } from '@epilot360/icons'
<EditIcon />
// or
<EpilotIcon name="edit" />
To avoid bundling the entire @epilot360/icons library, you can import the module directly:
import EditIcon from '@epilot360/icons/react/Edit'
;<EditIcon />
To directly use svg files shipped as part of this package, e.g. with file-loader you can import from:
import EditIconSVG from '@epilot360/icons/svg/Edit/icon.svg'
import EditIconSVGFill from '@epilot360/icons/svg/Edit/icon-fill.svg'
;<img src={EditIconSVG} />
The svgIcon() function returns the raw SVG as a string.
import { svgIcon } from '@epilot360/icons';
<div dangerouslySetInnerHTML={{ __html: svgIcon({ name: 'epilot' }) }} />
<pre>
{svgIcon({ name: 'epilot', variant: 'filled', width: 48, height: 48, fill: 'white' })}
</pre>
Run storybook locally:
yarn storybook
To add a new icon, modify icons.config.yaml and run the codegen script.
yarn codegen
You should immediately see your new icon.
First add a custom icon to icons.config.yaml without an svg_import property. This prevents
codegen from overriding your custom icon module.
Then add the custom svg. See src/svg/Epilot for an example.
yarn
yarn start
# bundle served at http://localhost:5600/bundle.js
FAQs
[](#) [](https://www.npmjs.com/package/@epilot360/icons)
The npm package @epilot360/icons receives a total of 371 weekly downloads. As such, @epilot360/icons popularity was classified as not popular.
We found that @epilot360/icons demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 41 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.