
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
HTML, CSS, and JavaScript components for building modern, browser-based user interfaces.
HTML, CSS, and JavaScript components for building modern, browser-based user interfaces.
Blox UI (blox) is pretty specific to the applications we are building here at Impact Marketing Specialists. However, that doesn't mean you can't leverage what we've done with your own projects. There are two ways to leverage bloxui.
If you dig our theme(s?) and the way we are maturing our toolkit for applications, feel free to skip down to the Getting Started section and start using what we've built. This is how we use it internally.
You may not be into our style, choices of libraries, etc. But maybe you've been looking for something like this for your own projects. Feel free to use blox as guide; it's all bower, npm, grunt goodness. If you're looking for deeper customizations yet, like custom jquery builds, amd definitions and the like; they will be coming soon.
Blox UI is about leveraging some common JS and CSS libraries that experienced developers are likely to have some level of exposure to, extending/modifying attributes or features of those libraries and throwing in our own batch of common components for building consistent web applications.
This is a common issue for many teams, who simply elect to include hosted versions of jQuery, jQueryUI, YUI and/or Bootstrap. In some cases teams will go and use the online tools to customize a given library, download the package and include it with their project sources. Some teams will even be as advanced as to fully customize and brand a library for their purposes.
This can often lead to various versions of libraries being used in various distict projects that are deployed together. "Ouch. Which version does x project use? Did it get all the nice Bootstrap tweaks we made? No? Oh let's copy that over."
We'd like to provide all of our common libraries as a nicely bundled package; all at their specific version number - so there's never any confusion which version of which libraries are being bundled.
We like Attribute Modules. We also like Bootstrap. Blox is where we merge those worlds together. In addition, we also bring over the glyph icons (in an AMCSS friendly way) and pile on new components of our own. Some of our extra components will have further dependencies (table sorting, etc.) and we may bring jQuery UI and Bootstrap together.
Blox UI is our playground for integrating and introducing additions to our JS/CSS toolset. Versions are likely to match API changes from dependent libraries. In the future, even lighter, more custom builds of libraries may be generated as well as proper source maps.
Versioning is critical. Teams may work on various projects and it is critical that each project can be safely upgraded to a newer version of blox. Likely this may mean some API changes that break backwards compatibility or net new components. It is unsafe to wholesale publish a new version of blox that all projects are linked against.
Projects should include and be built against a particular release of blox. As newer versions of blox are released, projects can safely be upgraded and individually tested for API compatibility.
To include blox in your project use one of the following options:
git clone https://github.com/impactmarketingspecialists/bloxui.git.bower install bloxui.npm install bloxui.Blox UI is maintained under the Semantic Versioning guidelines.
Code and documentation copyright 2011-2014 Impact Marketing Specialists, Inc. Code released under the MIT license. Docs released under Creative Commons.
FAQs
HTML, CSS, and JavaScript components for building modern, browser-based user interfaces.
The npm package bloxui receives a total of 1 weekly downloads. As such, bloxui popularity was classified as not popular.
We found that bloxui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.