
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
awesomicons
Advanced tools
AwesomIcons is a library that allows to use SVG icons with dynamic fill and stroke colors.
AwesomIcons does its job through two different steps:
by NodeJS, it reads SVG files within a folder specified by the user and stores their content in a SASS map using filenames as keys; next, the SASS map is written into a SCSS file choosen by the user;
by SCSS, it provides a mixin that allows the user to get an icon from the stored SASS map and to color it by passing to the mixin a list of colors.
Move to the root of your project by terminal and run the following command to install AwesomIcons:
npm install awesomicons
Then, add ./node_modules/awesomicons/lib/_awesomicons.scss to your SCSS dependencies.
In order to use AwesomIcons:
save each icon in a separate SVG file and locate it in a dedicated folder (e.g. images/icons) which will contain only icon files;
for each SVG file, provide a replacement of fill/stroke attribute values with proper placeholders, according to the choise of using single-color or multi-color mode. In particular:
use [fill | stroke]="{{__AI-COLOR__}}" for single-color mode;
use [fill | stroke]="{{__AI-COLOR-[#]__}}", where [#] is the index of the color layer, for multi-color mode.
Move to the root of your project by terminal and run the following command to init AwesomIcons:
npm explore awesomicons -- npm run awesomicons [source] [destination] [watch]
where:
[source] is your project's icons folder path;
[destination] is the filepath of SCSS file you want to use to store the SASS map in;
[watch] allows to listen for changes in icons folder, so the SASS map can be live updated when you add, remove or modify SVG files (optional).
For examples and more, read this.
FAQs
SVG icons handler
We found that awesomicons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.