
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@transcend-io/figma-action
Advanced tools
A GitHub action that will export Figma components from design files to your repository.
Example workflow
name: Export SVG from Figma
on: [push]
jobs:
all:
name: Figma Export
runs-on: ubuntu-latest
steps:
- uses: primer/figma-action@v1.0.0-alpha.2
with:
args: "format=svg outputDir=./build/"
env:
FIGMA_FILE_URL: "https://www.figma.com/file/ZFjrph2HUwFK8Q3uEtJIu1PT/youtfilename"
FIGMA_TOKEN: ${{ secrets.FIGMA_TOKEN }}
Secrets
FIGMA_TOKEN (required)
This token is used to access the Figma API. It's required to generate one so this action will work. It's recommended to set the token in a secret token in your repository.
env variables
FIGMA_FILE_URL (required)
This is the file url that you would like to export from. The action will search the file for components and export them with your configurations.
Workflow args (optional)
format – The export format for exporting from Figma. Options are svg, jpg, png. Default is jpgoutputDir – Where you would like the exported files to live. Default is ./build/scale – When choosing an image format jpg or png this is the export scale between 0.01 and 4 that will allow you to scale the image. Default is 1.The output of this action lives in ./build/ by default, but can be configured. In addition to the files exported you will see a data.json file exported. This contains information about the exported components mapped by component id.
The directory will look like this:
./outputDir/
├── format/
| └── componentName.format
└── build.json
The build.json file will look like this:
{
"0:639": {
"name": "plus", // component name
"id": "0:639", // component figma id
"key": "89696b0b52493acc8692546ac829bd4e334c63a2", // component global figma id
"file": "FP7lqd1V00LUaT5zvdklkkZr", // figma file key
"description": "keywords: add, new, more", // figma component description
"width": 12, // width of the component frame
"height": 16, // height of the component frame
"image": "https://s3-us-west-2.amazonaws.com/figma-alpha-api/img/1/6d/1234" // aws URL for the exported file
}
}
FAQs
GitHub action for exporting figma components.
We found that @transcend-io/figma-action demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.