
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@getable/avatar
Advanced tools
Component that displays an image within a bordered bounding box.
Table of Contents generated with DocToc
import React from 'react'
import Avatar from 'avatar'
React.render(<Avatar image="http://myimage"/>, document.createElement('div'))
@import "avatar";
<String> image
RequiredPath to an image.
<String> OR <Number> size
RequiredDefaults to "normal". One of "normal", "large", or a number of pixels for the width.
<String> alt
RequiredRequired because it's good for accessibility and the spec says so. The alt
attribute for the image.
<Function> onClick
Handler for a a click on the avatar. Defaults to nothing.
<Boolean> borderless
Defaults to false
. If enabled, turns off the border. This might be useful if you just need an image constrained to a certain size.
<Object> or <String> srcSet
Sets srcset
on the image. If a string, set this just like you would in normal HTML. If an object, the keys are the size and the values are the url
srcSet={{'1x': 'http://…', '2x': 'http://'}}
Tests are in tape.
npm test
will run the tests in a browser.npm run tdd
will run the tests in a browser on every file change.Install ribcage
npm i -g ribcage
ribcage preview .
# run with client side js enabled
ribcage preview . -s
Open http://localhost:4001/default
To publish, run npm run release -- [{patch,minor,major}]
NOTE: you might need to sudo ln -s /usr/local/bin/node /usr/bin/node
to ensure node is in your path for the git hooks to work
npm i -g npm
git push --follow-tags
will work. brew install git
Artistic 2.0 © Joey Baker
v1.2.1 | 2015-06-01
FAQs
Component that displays an image within a bordered bounding box.
The npm package @getable/avatar receives a total of 0 weekly downloads. As such, @getable/avatar popularity was classified as not popular.
We found that @getable/avatar demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.