
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Material Components Web implemented in React.
Install the library using npm:
npm i mdc-react
If you plan on using the Sass files, you'll also need to install sass
:
npm i -D sass
NOTE: MDC React (as well as MDC Web) uses the new Sass Module System. Unfortunately at this time the
node-sass
implementation does not support it. Please use thesass
library.
To use Material Icons include them in your HTML:
<link href="https://fonts.googleapis.com/css2?family=Material+Icons" rel="stylesheet">
To use Material Symbols include them in your HTML:
<link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined" rel="stylesheet">
The above snippet includes the default configuration for each axis, with weight at 400, optical size at 48, grade at 0 and fill (also 0.)
To configure the symbols follow the developer guide.
To use the components just import what you need from the library:
import { Button } from 'mdc-react';
const App = () => {
return (
<div>
<Button>Click me!</Button>
</div>
);
};
Alternatively you can import only the components you need:
import Button from 'mdc-react/button';
import Typography from 'mdc-react/typography';
const App = () => {
return (
<div>
<Typography>Hello world!</Typography>
<Button>Click me!</Button>
</div>
);
};
You can use all the styles:
@use 'path-to-node_modules/mdc-react';
or only the ones you need:
@use 'path-to-node_modules/mdc-react/src/button';
@use 'path-to-node_modules/mdc-react/src/typography';
FAQs
Material Components for the web implemented in React
The npm package mdc-react receives a total of 83 weekly downloads. As such, mdc-react popularity was classified as not popular.
We found that mdc-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.