
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@tekton-ui/styled
Advanced tools
Token-enforced styled-components wrapper with compile-time and runtime validation
Token-enforced styled-components wrapper with compile-time and runtime validation.
Drop-in replacement for styled-components that enforces design token usage and rejects hardcoded CSS values.
pnpm add @tekton/styled styled-components
import { styled, tokens } from '@tekton/styled';
// ✅ Valid: Using tokens
const Card = styled.div`
background: ${tokens.bg.surface.elevated};
padding: ${tokens.spacing[6]};
border-radius: ${tokens.radius.lg};
box-shadow: ${tokens.shadow.md};
`;
// ❌ Invalid: Hardcoded values throw runtime errors
const Bad = styled.div`
background: #ffffff; // Error: Hardcoded value detected
padding: 16px; // Error: Hardcoded value detected
`;
// ✅ Valid: Non-token properties work normally
const Layout = styled.div`
display: flex;
flex-direction: column;
background: ${tokens.bg.surface.default};
`;
The tokens accessor provides IDE autocomplete and returns CSS variable references:
tokens.bg.surface.default; // → 'var(--tekton-bg-surface-default)'
tokens.spacing[4]; // → 'var(--tekton-spacing-4)'
tokens.fg.primary; // → 'var(--tekton-fg-primary)'
MIT
FAQs
Token-enforced styled-components wrapper with compile-time and runtime validation
The npm package @tekton-ui/styled receives a total of 0 weekly downloads. As such, @tekton-ui/styled popularity was classified as not popular.
We found that @tekton-ui/styled demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.