
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
@salla.sa/twilight-bundles
Advanced tools
SDK for Salla Twilight Bundles - Develop and build custom components for Salla platform
Core build tools and plugins for Salla Twilight components. This package provides the build infrastructure used by the starter kit and other Twilight component packages.
sallaTransformPlugin)Transforms component files to ensure proper naming and registration in the Twilight system.
import { sallaTransformPlugin } from '@salla.sa/twilight-bundles/vite-plugins';
export default defineConfig({
plugins: [
sallaTransformPlugin()
]
});
The transform plugin:
src/components/*/index.tssallaBuildPlugin)Handles component bundling and output configuration.
import { sallaBuildPlugin } from '@salla.sa/twilight-bundles/vite-plugins';
export default defineConfig({
plugins: [
sallaBuildPlugin()
]
});
The build plugin:
src/components/sallaDemoPlugin)Provides a development environment for testing components.
import { sallaDemoPlugin } from '@salla.sa/twilight-bundles/vite-plugins';
export default defineConfig({
plugins: [
sallaDemoPlugin()
]
});
The demo plugin:
This package is typically used as a dependency in Twilight component packages. See the starter kit for a complete example of how to use these plugins.
pnpm install
pnpm run build
MIT
FAQs
SDK for Salla Twilight Bundles - Develop and build custom components for Salla platform
The npm package @salla.sa/twilight-bundles receives a total of 8 weekly downloads. As such, @salla.sa/twilight-bundles popularity was classified as not popular.
We found that @salla.sa/twilight-bundles demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.