
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@tourstream/fti-group-icon-font
Advanced tools
Icon font for projects of FTI Group.
This demo page will show all icons of the latest version of this package.
There are different ways to use this font ...
If you want to use the npm package just install with npm
$ npm install @tourstream/fti-group-icon-font --save
or with yarn
$ yarn add @tourstream/fti-group-icon-font
After this step you can use the sources as you like. They can be found in ./node_modules/@tourstream/fti-group-icon-font/dist
📌 npm include only versioned packages.
You can put the following snippet into the head of your HTML document ...
<link rel="stylesheet" href="https://assets.gcloud.fti-group.com/fti-group-icon-font/latest/fti-group-icon-font.css">
... or something similar.
📌 GCS include versioned packages and the latest version of master branch.
src
npm run build
##Deployment
Staging
For feature branch deployment use Bamboo (Plan: FTI Group Icon Font).
A branch is available on Bamboo after the branch is created on Github.
https://storage.googleapis.com/asset-store/fti-group-icon-font/staging/<BRANCH-NAME>/fti-group-icon-font.html
This will happen automatically. You have nothing to do.
To trigger the publish to npm registry you have to call the following command:
$ npm version minor
The build server (travis) will now update the version of the package to the next minor version and publish new npm package.
This file name will be also the class name inside of CSS.
Example: file name hello-world.svg
and CSS usage <i class="fg-hello-world"></i>
FAQs
Icon font for projects of FTI Group
We found that @tourstream/fti-group-icon-font demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.