
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@misk/components
Advanced tools
This package provides shared, styled React components across Misk tab repos. The top of each component/container file contains a usage example.
$ yarn add @misk/components
createApp(routes)
: builder function to create an <App history={history}/>
componentcreateIndex(tabSlug, App, Ducks)
: builder function to create bootstrapping objects necessary for index.tsx
ErrorCalloutComponent
: Processes a Redux / Axios error and dumps raw JSON for debuggingOfflineComponent
: NonIdealState component for Offline or Loading tab statePathDebugComponent
: outputs values passed in by props for hash
, pathname
, and search
in React-Router instanceSidebarComponent
: dashboard styled sidebarNavbarComponent
: dashboard styled NavbarDesktopWideOnlyContainer
: Only shows container when window width >1200pxFlexContainer
: Container using CSS FlexBox to have enclosed items flow responsively to screen widthMobileNeverContainer
: Never show container when window width <768pxMobileOnlyContainer
: Only show container when window width <768pxResponsiveContainer
: Responsive container that all tabs and Nav Navbar use to ensure consistent view widthFAQs
Microservice Kontainer Common Components
The npm package @misk/components receives a total of 1 weekly downloads. As such, @misk/components popularity was classified as not popular.
We found that @misk/components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.