
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@svelte-things/toast
Advanced tools
see in action -> Home for stoast
Svelte Toast UI is a versatile and customizable toast notification system for Svelte applications. It allows you to easily display informative messages to your users in a visually appealing and user-friendly way.
You can install Svelte Toast UI using your preferred package manager:
npm
npm install @svelte-things/toast
pnpm
pnpm add @svelte-things/toast
To get started with Svelte Toast UI, follow these simple steps:
Import the required components in your Svelte application:
<script>
import { Toast, toaster } from '@svelte-things/toast';
</script>
Add the ToastContainer component to your layout in your Svelte app's root file. Customize its appearance and position according to your preferences:
<Toast
position="top-center" // Position can be 'top', 'bottom', 'left', 'right', 'center', etc.
customClass="" // Add your custom tailwind classes for styling
/>
Use the toaster object to trigger toast notifications in your app
<button on:click={() => toaster.success({ title: 'Success', content: 'Task completed!' })}>
Show Success Toast
</button>
Customize your toasts by setting properties like progressColor in the toaster functions. Customize the progress bar color as needed.
Tailwind css required for this component add this to your tailwind config file
./node_modules/@svelte-things/**/*.{html,js,svelte,ts}
add this in content of the tailwind config file. important
Custom Type toast
toaster.show({ title: 'Success', content: 'Task completed!' , type:'error' , progressColor:"bg-blue-500" , duration:3000 })
The Toast component is used to create a container for displaying toast notifications. It offers dynamic positioning and transition options for toast notifications.
**should be placed in root of your project**
position (optional): Position to display the toast container. Options include 'top-left', 'top-center', 'top-right', 'bottom-left', 'bottom-center', and 'bottom-right'.customClass (optional): Custom CSS classes to style the container.withProgress(default = false) : set true to show the progress barclosable(default = true) : set true to not show the close icon in toastmaxToast(default = 3) : set the no of toast to showstacked(default = true) : set stacked to falase , if you dont want the toasts stack on top of each otherposition prop allows you to set the desired position of the toast container, which can be adjusted to 'top-left', 'top-center', 'top-right', 'bottom-left', 'bottom-center', or 'bottom-right'.+layout.svelte
<script>
import {Toast} from '@svelte-things/toast';
// Customize the position, styling, and transitions
let customPosition = 'top-center';
let customClass = 'bg-primary'; //tailwind classes
</script>
<button class="px-3 py-1 border bg-slate-50 text-slate-900 rounded-md" on:click={() =>toaster.success({title: 'Success',content: 'This is a success toast',progressColor: 'bg-green-500' , duration:3000 // in ms})}>
success
</button>
<Toast
position={customPosition}
customClass={customClass}
/>
This example demonstrates how to use the ToastContainer component and customize its positioning, styling, and transitions to suit your needs.
contributions are welcomed
FAQs
Toast UI for Svelte
We found that @svelte-things/toast demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.