
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@file-viewer/preset-lite
Advanced tools
Lite renderer preset for File Viewer with text, Markdown, code, image, audio, and video preview lines.
Flyfish File Viewer 的轻量 renderer preset。它适合只需要 Markdown、代码、文本、图片、音频和视频预览的业务页面,避免默认安装 Office、PDF、CAD、Typst、3D、压缩包等重链路。
@file-viewer/renderer-pdf、@file-viewer/renderer-word 或其它专业 renderer。推荐和 @file-viewer/vite-plugin 一起使用。安装本 preset 后,插件会自动发现并激活轻附件能力:
fileViewerRenderers({
copyAssets: true
})
组件默认 autoRenderers:true,业务代码无需手动传 renderers。需要完全手动控制 registry 时再直接传入:
import FileViewer from '@file-viewer/vue3'
import { liteRenderers } from '@file-viewer/preset-lite'
const options = {
builtinRenderers: 'none',
rendererMode: 'replace',
renderers: liteRenderers,
}
@file-viewer/renderer-text@file-viewer/renderer-image@file-viewer/renderer-mediaFAQs
Lite renderer preset for File Viewer with text, Markdown, code, image, audio, and video preview lines.
The npm package @file-viewer/preset-lite receives a total of 5,288 weekly downloads. As such, @file-viewer/preset-lite popularity was classified as popular.
We found that @file-viewer/preset-lite demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.