
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
The m3e-card component is a flexible, expressive container for presenting a unified subject—text, media, and actions—on a visually distinct surface. It supports multiple appearance variants via the variant attribute: filled (default, for solid emphasis), outlined (for subtle framing with a border), and elevated (for depth and motion with shadow elevation).
Cards can be made actionable, responding to user interaction when the actionable attribute is set, and can be presented inline with surrounding content using the inline attribute.
It supports both vertical and horizontal layouts through the orientation attribute. Content organization is enabled via dedicated slots for header, content, actions, and footer, or developers can use the default slot for custom layouts.
The component provides dynamic elevation, adaptive shape, and expressive color theming, and responds to interaction states (hover, focus, press, disabled) with smooth motion and visual feedback, ensuring clarity, accessibility, and a cohesive user experience in accordance with Material Design 3 guidelines.
This package is part of M3E monorepo, a unified suite of Material 3 web components. Explore the docs to see them in action.
npm install @m3e/card
This package includes a Custom Elements Manifest to support enhanced editor tooling and developer experience.
To enable autocomplete and hover documentation for @m3e/card, install the Custom Elements Manifest Language Server extension. It will automatically detect the manifest bundled with this package and surface tag names, attributes, slots, and events in supported files.
Alternately, you can explicitly reference the html-custom-data.json and css-custom-data.json in your workspace settings:
{
"html.customData": ["./node_modules/@m3e/card/dist/html-custom-data.json"],
"css.customData": ["./node_modules/@m3e/card/dist/css-custom-data.json"]
}
This package uses JavaScript Modules. To use it directly in a browser without a bundler, use a module script similar to the following.
<script type="module" src="/node_modules/@m3e/card/dist/index.js"></script>
In addition, you must use an import map to include dependencies.
<script type="importmap">
{
"imports": {
"lit": "https://cdn.jsdelivr.net/npm/lit@3.3.0/+esm",
"@m3e/core": "/node_modules/@m3e/core/dist/index.js"
}
}
</script>
For production, use index.min.js for faster load times.
m3e-card — A content container for text, images (or other media), and actions in the context of a single subject.The following example illustrates each of the dedicated slots of a card.
<m3e-card>
<div slot="header">Header section</div>
<div slot="content">Content section</div>
<div slot="actions">Actions section</div>
<div slot="footer">Footer section</div>
</m3e-card>
This section details the attributes, slots and CSS custom properties available for the m3e-card component.
| Attribute | Type | Default | Description |
|---|---|---|---|
actionable | boolean | false | Whether the card is "actionable" and will respond to use interaction. |
inline | boolean | false | Whether to present the card inline with surrounding content. |
orientation | "horizontal" | "vertical" | "vertical" | The orientation of the card. |
variant | "filled" | "outlined" | "elevated" | "filled" | The appearance variant of the card. |
| Slot | Description |
|---|---|
| (default) | Renders content without padding. |
header | Renders the header section. |
content | Renders padded content. |
actions | Renders interactive controls. |
footer | Renders footer content. |
The m3e-card element supports extensive theming via scoped CSS custom properties. These properties enable fine-grained control over layout, shape, elevation, color, and interaction states across all appearance variants.
| Property | Description |
|---|---|
--m3e-card-padding | Internal spacing for all slotted regions. |
--m3e-card-shape | Corner radius of the card container. |
| Property | Description |
|---|---|
--m3e-filled-card-text-color | Foreground color for text content. |
--m3e-filled-card-container-color | Background color of the container. |
--m3e-filled-card-container-elevation | Elevation level of the container. |
| Property | Description |
|---|---|
--m3e-filled-card-disabled-text-color | Text color when disabled. |
--m3e-filled-card-disabled-text-opacity | Opacity applied to text when disabled. |
--m3e-filled-card-disabled-container-color | Background color when disabled. |
--m3e-filled-card-disabled-container-elevation | Elevation level when disabled. |
--m3e-filled-card-disabled-container-elevation-color | Shadow color when disabled. |
--m3e-filled-card-disabled-container-elevation-opacity | Shadow opacity when disabled. |
--m3e-filled-card-disabled-container-opacity | Overall container opacity when disabled. |
| Property | Description |
|---|---|
--m3e-filled-card-hover-text-color | Text color on hover. |
--m3e-filled-card-hover-state-layer-color | State layer color on hover. |
--m3e-filled-card-hover-state-layer-opacity | State layer opacity on hover. |
--m3e-filled-card-hover-container-elevation | Elevation level on hover. |
| Property | Description |
|---|---|
--m3e-filled-card-focus-text-color | Text color on focus. |
--m3e-filled-card-focus-state-layer-color | State layer color on focus. |
--m3e-filled-card-focus-state-layer-opacity | State layer opacity on focus. |
--m3e-filled-card-focus-container-elevation | Elevation level on focus. |
| Property | Description |
|---|---|
--m3e-filled-card-pressed-text-color | Text color on press. |
--m3e-filled-card-pressed-state-layer-color | State layer color on press. |
--m3e-filled-card-pressed-state-layer-opacity | State layer opacity on press. |
--m3e-filled-card-pressed-container-elevation | Elevation level on press. |
| Property | Description |
|---|---|
--m3e-elevated-card-text-color | Foreground color for text content. |
--m3e-elevated-card-container-color | Background color of the container. |
--m3e-elevated-card-container-elevation | Elevation level of the container. |
| Property | Description |
|---|---|
--m3e-elevated-card-disabled-text-color | Text color when disabled. |
--m3e-elevated-card-disabled-text-opacity | Opacity applied to text when disabled. |
--m3e-elevated-card-disabled-container-color | Background color when disabled. |
--m3e-elevated-card-disabled-container-elevation | Elevation level when disabled. |
--m3e-elevated-card-disabled-container-elevation-color | Shadow color when disabled. |
--m3e-elevated-card-disabled-container-elevation-opacity | Shadow opacity when disabled. |
--m3e-elevated-card-disabled-container-opacity | Overall container opacity when disabled. |
| Property | Description |
|---|---|
--m3e-elevated-card-hover-text-color | Text color on hover. |
--m3e-elevated-card-hover-state-layer-color | State layer color on hover. |
--m3e-elevated-card-hover-state-layer-opacity | State layer opacity on hover. |
--m3e-elevated-card-hover-container-elevation | Elevation level on hover. |
| Property | Description |
|---|---|
--m3e-elevated-card-focus-text-color | Text color on focus. |
--m3e-elevated-card-focus-state-layer-color | State layer color on focus. |
--m3e-elevated-card-focus-state-layer-opacity | State layer opacity on focus. |
--m3e-elevated-card-focus-container-elevation | Elevation level on focus. |
| Property | Description |
|---|---|
--m3e-elevated-card-pressed-text-color | Text color on press. |
--m3e-elevated-card-pressed-state-layer-color | State layer color on press. |
--m3e-elevated-card-pressed-state-layer-opacity | State layer opacity on press. |
--m3e-elevated-card-pressed-container-elevation | Elevation level on press. |
| Property | Description |
|---|---|
--m3e-outlined-card-text-color | Foreground color for text content. |
--m3e-outlined-card-container-elevation | Elevation level of the container. |
--m3e-outlined-card-outline-color | Border color of the card. |
--m3e-outlined-card-outline-thickness | Border thickness of the card. |
| Property | Description |
|---|---|
--m3e-outlined-card-disabled-text-color | Text color when disabled. |
--m3e-outlined-card-disabled-text-opacity | Opacity applied to text when disabled. |
--m3e-outlined-card-disabled-container-elevation | Elevation level when disabled. |
--m3e-outlined-card-disabled-container-elevation-color | Shadow color when disabled. |
--m3e-outlined-card-disabled-container-elevation-opacity | Shadow opacity when disabled. |
--m3e-outlined-card-disabled-outline-color | Border color when disabled. |
--m3e-outlined-card-disabled-outline-opacity | Border opacity when disabled. |
| Property | Description |
|---|---|
--m3e-outlined-card-hover-text-color | Text color on hover. |
--m3e-outlined-card-hover-state-layer-color | State layer color on hover. |
--m3e-outlined-card-hover-state-layer-opacity | State layer opacity on hover. |
--m3e-outlined-card-hover-container-elevation | Elevation level on hover. |
--m3e-outlined-card-hover-outline-color | Border color on hover. |
| Property | Description |
|---|---|
--m3e-outlined-card-focus-text-color | Text color on focus. |
--m3e-outlined-card-focus-state-layer-color | State layer color on focus. |
--m3e-outlined-card-focus-state-layer-opacity | State layer opacity on focus. |
--m3e-outlined-card-focus-container-elevation | Elevation level on focus. |
--m3e-outlined-card-focus-outline-color | Border color on focus. |
| Property | Description |
|---|---|
--m3e-outlined-card-pressed-text-color | Text color on press. |
--m3e-outlined-card-pressed-state-layer-color | State layer color on press. |
--m3e-outlined-card-pressed-state-layer-opacity | State layer opacity on press. |
--m3e-outlined-card-pressed-container-elevation | Elevation level on press. |
--m3e-outlined-card-pressed-outline-color | Border color on press. |
See the root monorepo CONTRIBUTING.md for guidelines on contributing to this package.
This package is licensed under the MIT License.
FAQs
Card for M3E
We found that @m3e/card demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.