
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@vaadin-component-factory/vcf-avatar-item
Advanced tools
https://vcf-avatar-item.netlify.com/
Install vcf-avatar-item
:
npm i @vaadin-component-factory/vcf-avatar-item --save
Once installed, import it in your application:
import '@vaadin-component-factory/vcf-avatar-item';
And use it:
<vcf-avatar-item></vcf-avatar-item>
By default, an avatar icon is shown on the avatar component. There are three ways to change what is shown on the avatar.
name
attribute. An abbreviation will be created based on the provided name and will be shown instead of the avatar icon. E.g. Abbreviation for "John Doe" will be "JD".<vcf-avatar-item name="John Doe"></vcf-avatar-item>
abbr
attribute. The provided abbreviation will be shown instead of the avatar icon.<vcf-avatar-item abbr="ST"></vcf-avatar-item>
Providing abbr
will override name
attribute.
image
attribute. The provided image will be shown instead of the avatar icon. If provided, the name
attribute will be used as alt
attribute of the image.<vcf-avatar-item image="https://randomuser.me/api/portraits/women/5.jpg" name="Jane Doe"></vcf-avatar-item>
Providing image
will override both name
and abbr
attributes.
Fork the vcf-avatar-item
repository and clone it locally.
Make sure you have npm installed.
When in the vcf-avatar-item
directory, run npm install
to install dependencies.
Run npm start
to open the demo.
To contribute to the component, please read the guideline first.
Commercial Vaadin Add-on License version 3 (CVALv3). For license terms, see LICENSE.
Vaadin collects development time usage statistics to improve this product. For details and to opt-out, see https://github.com/vaadin/vaadin-usage-statistics.
FAQs
Vaadin Component Factory Avatar Item
The npm package @vaadin-component-factory/vcf-avatar-item receives a total of 37 weekly downloads. As such, @vaadin-component-factory/vcf-avatar-item popularity was classified as not popular.
We found that @vaadin-component-factory/vcf-avatar-item demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.