
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@pierre/highlights
Advanced tools
@pierre/highlights is a syntax highlighter written in WebAssembly Text (WAT),
with 73 built-in languages and Zed-compatible themes. It generates HTML or
themed tokens and supports streaming input and incremental edits.
Read the Documentation.
pnpm add @pierre/highlights
Runs in Node.js, browsers, and Cloudflare Workers. The package initializes WebAssembly automatically; highlighting calls are synchronous after import.
import { codeToHtml } from '@pierre/highlights';
import { pierreDark } from '@pierre/highlights/themes';
const htmlBytes = codeToHtml("console.log('Hello world!')", {
lang: 'js',
theme: pierreDark,
});
const html = new TextDecoder().decode(htmlBytes);
codeToHtml() returns UTF-8 HTML bytes. Decode them immediately, or copy them
with .slice() before the next highlighting or tokenization call.
See the docs for token rendering, streaming, incremental editing, themes, and the API reference.
moonx highlights:build
moonx highlights:dev
moonx highlights:test
moonx highlights:bench
moonx highlights:bench-live
moonx highlights:bench-memory
Benchmarks · Architecture · Bundled themes
FAQs
A fast code highlighter written in WebAssembly Text(Wat), from Pierre
The npm package @pierre/highlights receives a total of 271,454 weekly downloads. As such, @pierre/highlights popularity was classified as popular.
We found that @pierre/highlights demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.