
Research
6 Malicious Packagist Themes Ship Trojanized jQuery and FUNNULL Redirect Payloads
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.
@highlight-ui/input
Advanced tools
Using npm:
npm install @highlight-ui/input
Using yarn:
yarn add @highlight-ui/input
Using pnpm:
pnpm install @highlight-ui/input
In your (S)CSS file:
@import url('@highlight-ui/input');
Once the package is installed, you can import the library:
import { Input, TextArea } from '@highlight-ui/input';
The Input component depends on imask.js, which is a
relatively heavy dependency. This component's package is tree shakeable, if you
do not need the input masking functionalities you can import the TextInput
component instead of the Input component.
import { TextInput } from '@highlight-ui/input';
If you only need the masking functionalities of the component, you can import
the MaskedInput component:
import { MaskedInput } from '@highlight-ui/input';
import React from 'react';
import { Input } from '@highlight-ui/input';
export default function InputExample() {
return <Input name="map" color="input-critical" type="light" />;
}
The InputProps extends the HTMLInputElement types
| Prop | Type | Required | Default | Description |
|---|---|---|---|---|
disabled | boolean | No | false | Disables the input element |
className | string | No | Sets a class name to the component's root element | |
inputClassName | string | No | Allows providing a custom class name to the input element | |
outline | "default", "warning", "error" | No | default | Sets the color of the input's border |
focused | boolean | No | false | Focuses the underlying input element |
prefix | React.ReactNode | No | Renders the passed element on the left side of the input | |
prefixVariant | "opaque", "transparent" | No | Applies the specified style to the prefix element's container | |
suffix | React.ReactNode | No | Renders the passed element on the right side of the input | |
containerRef | React.Ref<HTMLDivElement> | No | Passes a ref to the input's container element | |
maskOptions | MaskOptions | No | Function which accepts locale and returns an imaskjs configuration object used for creating an IMask instance which will control the input element | |
onMaskAccept | (e: MaskEvent) => void | No | Sets a callback for when an event is fired on input changes allowed by the mask. This prop only works with maskOptions provided. | |
onMaskComplete | (e: MaskEvent) => void | No | Sets a callback for when an event is fired on input completion defined by the mask. This prop only works with maskOptions provided. |
The TextArea extends the HTMLTextAreaElement types
| Prop | Type | Required | Default | Description |
|---|---|---|---|---|
disabled | boolean | No | false | Disables the text area element |
outline | "default", "warning", "error" | No | default | Sets the color of the text area's border |
containerRef | React.Ref<HTMLDivElement> | No | Passes a ref to the input's container element |
Please visit personio.design for usage guidelines and visual examples.
If you're interested in contributing, please visit our contribution page.
FAQs
Input UI component for the Personio UI Library
We found that @highlight-ui/input demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.

Security News
The GCVE initiative operated by CIRCL has officially opened its publishing ecosystem, letting organizations issue and share vulnerability identifiers without routing through a central authority.

Security News
The project is retiring its odd/even release model in favor of a simpler annual cadence where every major version becomes LTS.