
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
Material Components Web implemented in React.
Install the library using npm:
npm i mdc-react
If you plan on using the Sass files, you'll also need to install sass
:
npm i -D sass
NOTE: MDC React (as well as MDC Web) uses the new Sass Module System. Unfortunately at this time the
node-sass
implementation does not support it. Please use thesass
library.
To use Material Icons include them in your HTML:
<link href="https://fonts.googleapis.com/css2?family=Material+Icons" rel="stylesheet">
To use Material Symbols include them in your HTML:
<link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined" rel="stylesheet">
The above snippet includes the default configuration for each axis, with weight at 400, optical size at 48, grade at 0 and fill (also 0.)
To configure the symbols follow the developer guide.
To use the components just import what you need from the library:
import { Button } from 'mdc-react';
const App = () => {
return (
<div>
<Button>Click me!</Button>
</div>
);
};
Alternatively you can import only the components you need:
import Button from 'mdc-react/button';
import Typography from 'mdc-react/typography';
const App = () => {
return (
<div>
<Typography>Hello world!</Typography>
<Button>Click me!</Button>
</div>
);
};
You can use all the styles:
@use 'path-to-node_modules/mdc-react';
or only the ones you need:
@use 'path-to-node_modules/mdc-react/src/button';
@use 'path-to-node_modules/mdc-react/src/typography';
FAQs
Material Components for the web implemented in React
We found that mdc-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.