
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
babel-plugin-css-prop
Advanced tools
Babel plugin to transpile css prop to a styled component.
The plugin will let you use the css prop ala emotion in libraries like linaria and styled-components. Internally, it will convert the css prop to a styled component.
Install the plugin:
yarn add --dev babel-plugin-css-prop
Then include it in your .babelrc:
{
"plugins": ["css-prop"]
}
Now you can use the css prop in your components:
function App(props) {
return (
<div
css={`
flex: 1;
background-color: ${props.bg};
`}
>
Hello world
</div>
);
}
You are not restricted to template literals in the css prop. You can also use a plain string.
The only restrictions are:
css prop must be inside a component/function and not in the top level scope.target: "linaria" | "styled-components" | "auto" | "none": The CSS-in-JS library you use. If you specify the library, the plugin will auto-insert a require statement for styled when needed. If you set it to "auto", it will try to auto-detect which library you use by reading your package.json. If you set it to "none", require statements won't be inserted. (Default: "auto")FAQs
Babel plugin to transpile css prop to a styled component
We found that babel-plugin-css-prop demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.