
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@mxenabled/mxui
Advanced tools
In order to run the project you will need to make sure that you have yarn installed. It must be higher than 1.22 in order to do that you must have corepack enabled. Do not just run "npm i" to install dependencies, all packages must be installed with yarn.
yarn
or yarn install
to install dependenciesyarn dev
(the project should automatically run in the browser)If your MR includes any changes outside of documentation, you will need to ensure the following:
CHANGELOG.md
as part of your MR.package.json
file, as it will be handled automatically by shipit
.To merge and publish, comment shipit --publish-version=major/minor/patch
once the MR is approved.
Shipit will handle version bumping based on the specified flag (major, minor, or patch), publish the package to the npm registry, merge the MR into the master branch, and create a corresponding tag.
Note: If an alpha version is to be published, update the package version to include a pre-release identifier like
1.2.3-alpha.1
or1.2.3-v1
and run thepublish:nodejs-npmregistry
job to publish that alpha version.
The QA storybook containing the latest changes is accessible here.
Follow the setup instructions found in
Teams are currently adding components as needed, so the list in storybook right now is what has been built so far.
FAQs
Package containing MX theme and common controls for MUI
The npm package @mxenabled/mxui receives a total of 1,165 weekly downloads. As such, @mxenabled/mxui popularity was classified as popular.
We found that @mxenabled/mxui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 30 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.