
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@stencil/sass
Advanced tools
This package is used to easily precompile Sass files within Stencil components. Internally this plugin uses a pure JavaScript implementation of Sass. Please see the
Behavioral Differences from Ruby Sass doc if issues have surfaced since upgrading from previous versions which used used the node-sass implementation.
First, npm install within the project:
npm install @stencil/sass --save-dev
Next, within the project's stencil config, import the plugin and add it to the config's plugins property:
import { Config } from '@stencil/core';
import { sass } from '@stencil/sass';
export const config: Config = {
plugins: [
sass({
// Optional config options
}),
],
};
During development, this plugin will kick-in for .scss or .sass style urls, and precompile them to CSS.
Sass options can be passed to the plugin within the stencil config, which are used directly by sass. Please reference sass documentation for all available options. Note that this plugin automatically adds the component's directory to the includePaths array.
The injectGlobalPaths config is an array of paths that automatically get added as @use with a wildcard (to avoid namespacing) declarations to all components. This can be useful to inject Sass variables, mixins and functions to override defaults of external collections. For example, apps can override default Sass variables of Ionic components. Relative paths within injectGlobalPaths should be relative to the stencil config file.
exports.config = {
plugins: [
sass({
injectGlobalPaths: ['src/globals/variables.scss', 'src/globals/mixins.scss'],
}),
],
};
Note that each of these files are always added to each component, so in most cases they shouldn't contain CSS because it'll get duplicated in each component. Instead, injectGlobalPaths should only be used for Sass variables, mixins and functions, but does not contain any CSS.
To control and suppress different types of Sass warnings you can use the following options:
quietDeps: Silences warnings from dependencies (files loaded through loadPaths or importers)silenceDeprecations: Silences specific deprecation warnings by their identifiers (e.g., 'import' for @import rule warnings)exports.config = {
plugins: [
sass({
// Silence all dependency warnings
quietDeps: true,
// Silence specific deprecation warnings
silenceDeprecations: ['import'],
}),
],
};
Please see our Contributor Code of Conduct for information on our rules of conduct.
FAQs
The Stencil Sass Plugin
The npm package @stencil/sass receives a total of 44,031 weekly downloads. As such, @stencil/sass popularity was classified as popular.
We found that @stencil/sass demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.