
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
slush-theme-patterns
Advanced tools
A Slush generator for the WordPress Theme Pattern Library.
Slush is built on Node.js and Gulp.js. In order to get up and running, you will first need to make sure these are installed globally.
You can head over to the Node.js homepage and install the latest version from there (the green "INSTALL" button). That will give you both Node.js and NPM (Node Package Manager).
Once you have Node installed, you can install the global dependencies (Gulp and Slush) with the following command:
$ npm install -g gulp slush
Additionally, this generator takes advantage of Sass for a couple one-off compiling tasks.
If you're on a Mac, you can install that Sass locally with the following:
$ gem install sass
OR the following, if you get a permissions error:
$ sudo gem install sass
A more in-depth set of instructions can be found at the official Sass docs.
Lastly, you will need to install the generator itself, via the following command:
$ npm install -g slush-theme-patterns
*If you are receiving a permissions error, you may need to run these installation commands as sudo. For example, sudo npm install -g gulp.
Now, you're ready to use the generator.
Anywhere outside of the Slush generator folder, create a new folder for your project:
$ mkdir my-new-project
Run the generator from within the new folder:
$ cd my-new-project && slush theme-patterns
Slush is a tool that uses Gulp for project scaffolding.
Slush does not contain anything "out of the box", except the ability to locate installed slush generators and to run them with liftoff.
To find out more about Slush, check out the documentation.
See the CONTRIBUTING Guidelines
If you have any problem or suggestion please open an issue here.
FAQs
A Slush generator for the Theme Pattern Library
We found that slush-theme-patterns demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.