
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
Note: Please use the main MaterialDesign repo to report issues. This repo is for distribution of the JavaScript files only.
JavaScript and TypeScript distribution for the Material Design Icons. This module contains all the path data for all icons.
npm install @mdi/js
import { mdiAccount } from '@mdi/js'
console.log(mdiAccount); // "M...Z"
react-icons provides a set of popular icons as React components. It supports multiple icon libraries, including Material Design Icons, FontAwesome, and more. Unlike @mdi/js, which provides raw SVG paths, react-icons offers ready-to-use React components.
material-design-icons is the official icon set from Google for Material Design. It provides icons in various formats, including SVG, PNG, and web fonts. While @mdi/js focuses on providing SVG paths as JavaScript constants, material-design-icons offers a broader range of formats.
mdi-react is a package that provides Material Design Icons as React components. It is similar to @mdi/js in that it focuses on Material Design Icons, but it offers the icons as React components instead of raw SVG paths.
FAQs
Dist for Material Design Icons for JS/TypeScript
The npm package @mdi/js receives a total of 353,599 weekly downloads. As such, @mdi/js popularity was classified as popular.
We found that @mdi/js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.