
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@stylexjs/babel-plugin
Advanced tools
StyleX expects you to transform all js
/ts
/tsx
files with @stylexjs/babel-plugin
.
In addition to transforming JS code, this plugin also produces an Array of CSS rules. All the CSS rules
generated from all JS files within your project should be concatenated together and converted to a CSS
file using the processStyles
function which is also exported from the same module.
@stylexjs/babel-plugin
is fairly lightweight. It pre-computes stylex
related functions like
create
and keyframes
by converting the argument AST to a JS object and transforming them
by passing them to the functions of the corresponding names within @stylex/shared
The StyleX Babel plugin does more than transform JavaScript (or TypeScript) files. It also returns a list of injected styles. The way that such a value can be returned while transforming a JS file is by using Babel's metadata
API.
An example of this can be seen in some of the tests, but the result of using Babel's transform(...)
function returns an object contains at least two keys:
code
which is the transformed JS codemetadata
is an object of metadata that the plugin may want to return as a side-effect.e.g.
const result = transformSync(sourceCode, {
filename: opts.filename,
parserOpts: { flow: { all: true } },
plugins: [stylexPlugin, opts],
});
const transformedCode = result.code;
const injectedStyles = result.metadata.stylex;
FAQs
StyleX babel plugin.
We found that @stylexjs/babel-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.