
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@iconsroom/react
Advanced tools
276,000+ open source icons for React — a runtime component, plus a CLI to vendor any icon as a local component.
276,000+ open source icons for React — two ways to use them, both free.
npm install @iconsroom/react react
import { Icon } from '@iconsroom/react';
<Icon pack="heroicons" name="academic-cap" size={24} color="#0f172a" />
The icon's SVG is fetched from the IconsRoom CDN on first use and cached in memory (deduped across every instance). Recoloring is knockout-safe — white detail is preserved, multicolor icons are left alone. SSR-safe; reserves its box before load so nothing shifts.
Props: pack, name, size (default 24), color (optional hex),
title (accessible label), plus any <span> props.
Prefer to own the code and ship nothing extra? Generate a standalone component per icon — tree-shakeable, offline forever, no dependency on this package:
npx @iconsroom/react add heroicons/academic-cap
npx @iconsroom/react add tabler/home tabler/settings --ts --out src/icons
import { AcademicCapIcon } from './src/icons/AcademicCapIcon';
<AcademicCapIcon size={20} className="text-slate-700" />
--ts emits typed .tsx; --out sets the directory (default src/icons).
Runtime <Icon> | Vendored (CLI) | |
|---|---|---|
| Bundle size | tiny (one component) | only what you add |
| Works offline | needs the CDN | yes |
| Access all 276K | instantly | one command each |
| Own the code | no | yes |
Every icon is open source; most packs are MIT / Apache 2.0 / CC BY, a few are CC BY-NC (non-commercial). Check the pack on iconsroom.com.
npm test # framework-free core + codegen (10 checks)
MIT © IconsRoom
FAQs
276,000+ open source icons for React — a runtime component, plus a CLI to vendor any icon as a local component.
We found that @iconsroom/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.