
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@isoftdata/svelte-change-password
Advanced tools
This component handles
To trigger/show the UI in the component
npm i @isoftdata/svelte-change-password
| Name | Type | Description | Default Value |
|---|---|---|---|
sendPasswordResetTokenEmail | (userName: string) => Promise<Account> | The function that calls the API to send the password recovery code to an account's recovery email. | Required |
changePassword | (resetToken: string, currentPassword: string, newPassword: string, userName: string) => Promise<void> | The function that calls the API to change the user's password. | Required |
passwordRules | Password Rules Object | The password rules use to validate new password entered. | undefined |
Account Object Type| Name | Type | Description | Default Value |
|---|---|---|---|
userName | string | The username of the user account. | '' |
recoveryEmail | string | The recovery email of the user account. | '' |
Password Rules Object Type| Name | Type | Description | Default Value |
|---|---|---|---|
minimumPasswordLength | number | The minimum length of the new password. | optional |
maximumPasswordLength | number | The maximum length of the new password. | optional |
numberOfRequiredLowercaseCharacters | number | The number of required lowercase characters in the new password. | optional |
numberOfRequiredUppercaseCharacters | number | The number of required uppercase characters in the new password. | optional |
numberOfRequiredNumericCharacters | number | The number of required numeric characters in the new password. | optional |
numberOfRequiredSpecialCharacters | number | The number of required special characters in the new password. | optional |
Call these on the component instance using bind:this
<script lang="ts">
import ChangePassword from '../lib/ChangePassword.svelte'
type Account = {
userName: string
recoveryEmail: string
}
let changePasswordComponent: ChangePassword
function sendPasswordResetTokenEmail(userName: string): Promise<Account> {
console.log('Hit API call!', userName)
return Promise.resolve({
userName,
recoveryEmail: '',
})
}
function changePassword(resetToken: string, currentPassword: string, newPassword: string, userName: string): Promise<void> {
console.log('Hit the API to change the user\'s password!')
return Promise.resolve()
}
</script>
<div class="container">
<h1>ChangePassword</h1>
<ChangePassword
bind:this={changePasswordComponent}
{sendPasswordResetTokenEmail}
{changePassword}
/>
<button on:click={() => changePasswordComponent.initiatePasswordRecovery('test', true)}>Initiate Password Recovery</button>
</div>
FAQs
Unknown package
The npm package @isoftdata/svelte-change-password receives a total of 20 weekly downloads. As such, @isoftdata/svelte-change-password popularity was classified as not popular.
We found that @isoftdata/svelte-change-password demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.