
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@istreamplanet/pebble
Advanced tools
A react-based design system built by iStreamPlanet
Visit the Pebble documentation site for information.
Before opening an issue or pull request, please read the Contributing guide.
See the Development guide for instructions on how to run Pebble locally for development.
To use Pebble, add the package to your package.json using your package manager of choice.
For yarn users:
$ yarn add @istreamplanet/pebble node-sass react-router-dom
For npm users:
npm install @istreamplanet/pebble node-sass react-router-dom --save
Include the Pebble foundation stylesheet in your layout template.
import '@istreamplanet/pebble/dist/Styles/foundation.scss';
Import the components into your application
import { Button, Card } from '@istreamplanet/pebble'`
Then add them in your React component as you would any other:
const MyComponent = () => (
<Card>
<Button>Submit</Button>
</Card>
)
Have a look at the pebble.istreamplanet.net for component documentation.
See the Releases page.
Copyright © 2019 iStreamPlanet Co., LLC
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
FAQs
Pebble Design System
The npm package @istreamplanet/pebble receives a total of 6 weekly downloads. As such, @istreamplanet/pebble popularity was classified as not popular.
We found that @istreamplanet/pebble demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.