Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
By Kirill Boychenko - Sep 24, 2025
@zywave/zui-bundle
Advanced tools
@zywave/zui-bundle
ZUI, out of the box, provides ES modules with bare path modifiers (e.g. `import '@zywave/zui-foo-bar'`). This is great as that's the way browsers are _going_, but they aren't there quite yet. Tooling exists to help solve this problem like webpack or rollu
ZUI Bundle
ZUI, out of the box, provides ES modules with bare path modifiers (e.g. import '@zywave/zui-foo-bar'). This is great as that's the way browsers are going, but they aren't there quite yet. Tooling exists to help solve this problem like webpack or rollup. If you really just need to get ZUI (all of ZUI) into your project and don't want to configure a build process, this is the package for you.
zui-bundle creates three main artifacts:
dist/bundle.js*: Most of the JS components (e.g. custom elements) of ZUI; with the exception of some componentsdist/css/zui-bundle.app.css: All of the separate CSS sheets merged into one (e.g. fonts, styles, etc.)dist/css/zui-bundle.fouc.css: All of the FOUC (flash of unstyled content) CSS sheets merged into one
In most cases, you will want all three.
* Note: ZUI Table is not included in dist/bundle.js because it is an opt-in only component.
For more information on installing this bundle, see our getting started guide.
ZUI Table
ZUI Table is an opt-in only component. If you want to use it, you'll need to import it separately. For more information, please check out the ZUI Table documentation.
<script type="module" src="https://cdn.zywave.com/@zywave/zui-bundle@{latest|next}/dist/components/table.js"></script>
Location of the artifact in the zui-bundle package: dist/components/table.js
Installation via CDN
We recommend using the Zywave CDN to serve up the ZUI bundle. This will ensure that you are always using the latest stable version of ZUI with the @latest distribution tag.
<!doctype html>
<html>
<head>
<title>Installing zui-bundle</title>
<!-- These two stylesheets should always be listed before all other application styles -->
<!-- Make sure `zui-bundle.fouc.css` is always listed first to counter FOUC -->
<link rel="stylesheet" href="https://cdn.zywave.com/@zywave/zui-bundle@{latest|next}/dist/css/zui-bundle.fouc.css" />
<link rel="stylesheet" href="https://cdn.zywave.com/@zywave/zui-bundle@{latest|next}/dist/css/zui-bundle.app.css" />
<script type="module" src="https://cdn.zywave.com/@zywave/zui-bundle@{latest|next}/dist/bundle.js"></script>
</head>
<body>
<!-- your content here -->
<body>
</html>
Distribution tags
There are two distribution tags we supply: @latest and @next. @latest will always point to the latest stable version of ZUI. @next will always point to the latest version of ZUI, regardless of stability. Learn more about the benefits of using our CDN with distribution tags here.
Installation via NPM or Yarn
If you want an à la carte experience, you can install individual component packages via Yarn or NPM.
The following works with no extra work:
> yarn add @zywave/zui-components-all
> yarn add @zywave/zywave-components-all
> npm install @zywave/zui-components-all
> npm install @zywave/zywave-components-all
Run ZUI Bundle locally
Relative to this directory:
yarn run build:afteryarn run lab
Debugging
Note: This bundle doesn't observe the "source" of ZUI, but rather the built outputs of each and every package. If you make a change in a TypeScript file in a component, you will need to rebuild that package prior to building the bundle.
The generated output from Rollup is quite hard to read. This is done purposefully, not to be difficult to read, but to reduce bytes in our final output. However, sometimes you really just want to see the full bundle in its legible glory.
There are a few plugins in the rollup.config.js file in this package that you can "turn off" by commenting them out:
tersercleanup
By commenting those plugins, and then rebuilding the bundle, you'll more easily be able to debug this package.
See the documentation site for more information.
FAQs
ZUI, out of the box, provides ES modules with bare path modifiers (e.g. `import '@zywave/zui-foo-bar'`). This is great as that's the way browsers are _going_, but they aren't there quite yet. Tooling exists to help solve this problem like webpack or rollu
The npm package @zywave/zui-bundle receives a total of 1,432 weekly downloads. As such, @zywave/zui-bundle popularity was classified as popular.
We found that @zywave/zui-bundle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 19 Sep 2025
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
By Olivia Brown - Sep 22, 2025
Research
/Security News
Identifying and Preventing Fraudulent Engineering Candidates: An Investigation into 80 Confirmed Cases
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
By Lauren Valencia, Kirill Boychenko - Sep 17, 2025