Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Automatic UI Color Palette Generator
npm i palx
Provide a single color value and Palx returns a full-spectrum color palette, well suited for UI design and data visualizations that work harmoniously with brand colors.
const palx = require('palx')
palx('#07c')
// Returns a color object with
// 12 hues and a gray spread across
// 10 luminance steps
Inspired by Open Color, Palx takes a single input color, then spreads the hue across the color spectrum in 12 steps, and spreads each hue across 10 luminance steps. Palx also desaturates the main color to create shades of gray and a black that are based off the original color.
MIT License
FAQs
Automatic UI Color Palette Generator
The npm package palx receives a total of 204 weekly downloads. As such, palx popularity was classified as not popular.
We found that palx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.