
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
mui-simple
Advanced tools
customized ALL MUI COMPONENTS to make simplify the usage of mui.
get a lot of features to use mui, like custom-color that you can send any color of theme color name.
or more customized way to use component easier way, and less code bugs homemade.
To run storybook locally, because peer dependencies not installed in package npm install, you need to wrap this project with package.json that include this peed in there node_modules.
there for, cut all git repo into the wrapper-repo directory and run npm install and run the npm run storybook in script's file: wrapper-repo/mui-simple/package.json
because using peer dependencies, to avoid from install force warning, add the following file change:
// .npmrc
legacy-peer-deps=true
install peer dependencies first:
npm install react react-dom @emotion/react@^11.14.0 @emotion/styled@^11.14.0 @mui/material@^7.1.1 react-router-dom@^6.16.0
then install the mui-simple package
npm install mui-simple
import your components with ES Module syntax, usage like this:
import { Button } from 'mui-simple';
export const App = () => {
return <Button>Hello Miu-Simple</Button>;
};
this package need more maintenance like :
☐ fully support typescript.
☐ make docs and fixing stories in storybook.
☐ Improving infrastructure and performance.
and so on..
so feel free to be in touch and make this beautiful package to be more awesome as should be!
:octocat: Hadriel Benjo
FAQs
Override mui-v7 components to simplify usage
The npm package mui-simple receives a total of 7 weekly downloads. As such, mui-simple popularity was classified as not popular.
We found that mui-simple demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.