
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@steeze-ui/components
Advanced tools
> Need Icons for your next SvelteKit project (heroicons, feather icons and more) ? Check out [@steeze-ui/icons](https://github.com/steeze-ui/icons)!
Need Icons for your next SvelteKit project (heroicons, feather icons and more) ? Check out @steeze-ui/icons!
Components for SvelteKit Apps. Check out the documentation for more info!
Install the package as dev dependency via pnpm, npm or yarn
pnpm i -D @steeze-ui/components
Once you've installed the package, you can import the base styles which consists of basic normalization and custom properties that most components are using (e.g colors or font sizes)
<script>
import '@steeze-ui/components/base.css'
</script>
You can easily override the custom properties and define your own design system
<script>
import {Select, TextField, Button, Toggle} from "@steeze-ui/components"
</script>
<Select items={[{id:1,label:"Label 1"}]}>
<TextField label="Text Field" value="Text" />
<Toggle checked />
<Button theme="primary" type="submit">Submit</Button>
Some components share the same parts, like both Select and TextField use the Label Component or the Toggle Component is just a styled and more user-friendly version of the Switch Component. By design you can use these parts via deep imports from the core/parts folder:
<script>
import Switch from "@steeze-ui/components/core/parts/Switch.svelte"
import Label from "@steeze-ui/components/core/parts/Label.svelte"
</script>
<Label for="switch">Switch me!</Label>
<Switch id="switch" checked />
Distributed under the MIT License.
FAQs
> Need Icons for your next SvelteKit project (heroicons, feather icons and more) ? Check out [@steeze-ui/icons](https://github.com/steeze-ui/icons)!
We found that @steeze-ui/components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.