
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
old-yaka-components
Advanced tools
npm
npm install yaka-components
yarn
yarn add yaka-components
import yakaComponents from 'yaka-components'
const { components, layoutComponents } = yakaComponents
import { Button, InputNumber, Card, Checkbox, Input } from 'igroot'
const CheckboxGroup = Checkbox.Group
import yakaComponents from 'yaka-components'
const { components, layoutComponents } = yakaComponents
const oldComponents = {
...components,
Checkbox: CheckboxGroup,
Button,
Input,
InputNumber,
Card,
TextArea: Input.TextArea,
}
├── README.md
├── dist 构建后的文件
│ ├── components
│ │ ├── index.js
│ │ ├── yaka-MonthPicker
│ │ │ └── index.js
│ │ ├── yaka-datepicker
│ │ │ └── index.js
│ │ ├── yaka-edit-table
│ │ │ ├── index.css
│ │ │ └── index.js
│ │ ├── yaka-editor
│ │ │ ├── index.css
│ │ │ └── index.js
│ │ ├── yaka-links
│ │ │ └── index.js
│ │ ├── yaka-radio
│ │ │ └── index.js
│ │ ├── yaka-select
│ │ │ └── index.js
│ │ ├── yaka-switch
│ │ │ └── index.js
│ │ ├── yaka-table
│ │ │ └── index.js
│ │ ├── yaka-timepicker
│ │ │ └── index.js
│ │ └── yaka-upload
│ │ └── index.js
│ ├── index.js
│ └── layoutComponents
│ ├── Logic.js
│ ├── Row.js
│ ├── formBlock.js
│ └── index.js
├── lib 源码入口
│ ├── components 组件
│ │ ├── index.js
│ │ ├── yaka-MonthPicker 月选择器
│ │ │ └── index.jsx
│ │ ├── yaka-datepicker 日期选择器
│ │ │ └── index.jsx
│ │ ├── yaka-edit-table 可编辑表格
│ │ │ ├── index.css
│ │ │ └── index.jsx
│ │ ├── yaka-editor 富文本编辑器
│ │ │ ├── index.css
│ │ │ └── index.jsx
│ │ ├── yaka-links 超链接
│ │ │ └── index.jsx
│ │ ├── yaka-radio 单选框
│ │ │ └── index.jsx
│ │ ├── yaka-select 下拉框
│ │ │ └── index.jsx
│ │ ├── yaka-switch 开关
│ │ │ └── index.jsx
│ │ ├── yaka-table 表格
│ │ │ └── index.jsx
│ │ ├── yaka-timepicker 时间选择器
│ │ │ └── index.jsx
│ │ └── yaka-upload 上传
│ │ └── index.jsx
│ ├── index.js
│ └── layoutComponents 布局组件
│ ├── Logic.jsx 逻辑组件
│ ├── Row.jsx row组件
│ ├── formBlock.jsx 表单组件
│ └── index.js
├── package.json
└── yarn.lock
js + react + igroot
yarn publish
FAQs
Unknown package
The npm package old-yaka-components receives a total of 1 weekly downloads. As such, old-yaka-components popularity was classified as not popular.
We found that old-yaka-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.