
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
styled-components-theme-helpers
Advanced tools
A set of help functions for use with React Styled Components.
A set of help functions for use with React Styled Components.
##styleString (property, value, units = 'px') Returns a CSS style constructed from a property and value. Adds units when not supplied.
##themeProp (path, units = 'px', defaultValue = '') Returns a CSS property value based on a styled component theme object property. Camel case keys should be used in the theme, and will be converted to CSS style properties. For use in a styled component definition.
styleString('marginBottom', 10);
returns
margin-bottom: 10px;
##themeStyle (path, units = 'px')
Returns a CSS style block based on a styled component theme property. Camel case keys should be used in the theme, and will be converted to CSS style properties. For use in a styled component definition.
theme = {
title: {
margin: [10, 20],
fontSize: 28
}
styleString('marginBottom', 10);
returns
margin: 10px 20px;
font-size: 28px;
This would be used in a styled component as follows:
// Styled component theme
theme = {
navItem: {
padding: [10, 0],
hover: {
backgroundColor: lightBlue
}
}
};
// Styled component example
const NavItem = styled.div`
display: flex;
flex-direction: row;
align-items: center;
cursor: pointer;
${themeStyle('sideNav.navItem')};
&:hover {
${themeStyle('sideNav.navItem.hover')};
}
${props => (props.selected ? themeStyle('sideNav.navItem.selected') : null)};
`;
FAQs
A set of help functions for use with React Styled Components.
We found that styled-components-theme-helpers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.