
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
⚠ cssvjs is currently not stable and heavily under development.
The API might change and all 0.0.x
releases should be treated as test / preview releases.
Install via npm:
$ npm install cssvjs
Install via yarn:
$ yarn add cssvjs
Include directly via jsdelivr:
<script src="https://cdn.jsdelivr.net/npm/graceful-ws/dist/cssvjs.min.js"></script>
import {parse} from 'cssvjs';
// const {parse} = require('cssvjs'); // Without es6 import
// const {parse} = CSSvJS; // In a browser env
console.log(parse(`rgba(40 54 22 / 23%)`));
which will print the following to the console:
{
type: 'color',
format: 'rgba',
value: [
{type: 'number', value: 40},
{type: 'number', value: 54},
{type: 'number', value: 22},
{type: 'percentage', value: 23}
]
}
All values are fully tested, submit an issue if you find a bug.
I'll slowly fill add more types. Version 1.0.0
will cover all the basic ones.
<angle>
parser / tests<color>
parser / tests<length>
parser / tests<percentage>
parser / tests<position>
parser / tests<ratio>
parser / tests<string>
parser / tests<time>
parser / tests<url>
parser / tests<flex-value>
parser / tests<resolution>
parser / tests<blend-mode>
parser / tests<integer>
parser / tests<number>
parser / tests<border-radius>
parser / tests<basic-shape>
parser / tests<gradient>
parser / tests<shape>
parser / tests (Deprecated)<transform-function>
parser / tests<filter-function>
parser / tests<timing-function>
parser / tests<var>
parser / tests<calc>
parser / tests<element>
parser / tests<repeat-style>
parser / tests<env>
parser / tests (Editors Draft)<frequency>
parser / tests<attr>
parser / tests<inheritance-keyword>
parser / testsFAQs
CSS Value parser
The npm package cssvjs receives a total of 0 weekly downloads. As such, cssvjs popularity was classified as not popular.
We found that cssvjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.