
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@livechat/design-system-icons
Advanced tools
The icons package provides a collection of icons that can be used to enhance the visual appeal of your applications. These icons are designed to be customizable and easy to incorporate into your projects.
Run the following command using npm (or with you other favorite package manager, eg. yarn):
npm install @livechat/design-system-icons --save
To use icons simply import them from the package:
import { Edit } from '@livechat/design-system-icons';
<Edit />;
But our icons are designed to be used in conjunction with our components library, @livechat/design-system-react-components. To use them in this manner, you need to install both packages. Please also refer to the installation guide for the LiveChat React Components package.
npm install @livechat/design-system-react-components @livechat/design-system-icons --save
And then import them like this:
import { Edit } from '@livechat/design-system-icons';
import { Icon } from '@livechat/design-system-react-components';
<Icon source={Edit} kind="primary" />;
To install all necessary dependencies, run the following command:
npm install
Next you need to prepare a SVG by replacing all color values in the stroke or/and fill attributes with currentcolor value. This will allow us to change the color of the icon using the color css property.
To add a new icon, you need to add a prepared SVG file to the ./svg directory. The file name should be in the snake_case format with -filled addition in the name for filled icon variants.
Then add new prop to IconsData in format <icon-name>: <icon-group-name>;.
Commit your changes and create a pull request. ⚠️ Commit message should follow the Conventional Commits naming pattern feat(icons): add new icon. ⚠️ This is crucial as, post squash merging, Git will use the PR name as the commit message.
After the pull request is merged, the changes will be published by the Design System team in the next release.
FAQs
Unknown package
The npm package @livechat/design-system-icons receives a total of 1,251 weekly downloads. As such, @livechat/design-system-icons popularity was classified as popular.
We found that @livechat/design-system-icons demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 70 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.