
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@moises.ai/design-system
Advanced tools
A comprehensive design system built on Radix UI components with custom theming and components.
npm install @moises.ai/design-system
Import components from the main package:
import { Box, Flex, Hello, World, Header } from "@moises.ai/design-system";
function App() {
return (
<Box>
<Header title="My App" />
<Flex>
<Hello name="Developer" />
<World />
</Flex>
</Box>
);
}
Import icons from the icons subpackage:
import { PlayIcon, RecordIcon } from "@moises.ai/design-system/icons";
function IconDemo() {
return (
<div>
<PlayIcon />
<RecordIcon />
</div>
);
}
Import primitive components:
import { Hello, World } from "@moises.ai/design-system/primitives";
function PrimitivesDemo() {
return (
<>
<Hello />
<World />
</>
);
}
Import the CSS styles:
import "@moises.ai/design-system/styles.css";
Make sure to import this at the root of your application to ensure all styles are loaded correctly.
Note: The styles.css file includes imports to Radix UI themes and custom colors. These paths are resolved when you install the package, so there's no need to install or configure anything additional.
npm install
npm run dev
npm run build
To test the package locally in another project before publishing to npm:
Install yalc globally:
npm install -g yalc
In the design system directory, temporarily update the version in package.json to a unique version (e.g., "50.0.1")
Publish the package locally:
yalc publish
In the target project where you want to test the design system:
yalc add @moises.ai/design-system@50.0.1
When finished testing, remove the local package:
# In the target project
yalc remove @moises.ai/design-system@50.0.1
npm install # or yarn to restore the published version
MIT
FAQs
Design System package based on @radix-ui/themes with custom defaults
We found that @moises.ai/design-system demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.