
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
MCP server and CLI that catches CSS cascade conflicts and Tailwind utility clashes before they ship.
An MCP server and CLI that catches CSS cascade conflicts and Tailwind utility clashes before they ship — built for AI coding agents and CI workflows.
cn(), clsx(), and twMerge() call expressions, not just plain className stringsconfidence, riskScore, and nextStepnpm install -g stylesafe
stylesafe src/components/Button.jsx
stylesafe --changed --fail-on-issues
stylesafe --projectRoot src
stylesafe --watch src
{
"mcpServers": {
"stylesafe": {
"command": "node",
"args": ["/absolute/path/to/server.js"]
}
}
}
stylesafe examples/tailwind-conflict.jsx
Returns a structured report:
{
"totalIssues": 5,
"riskScore": 275,
"averageRiskScore": 55,
"riskLevel": "medium",
"passed": true,
"clean": false,
"files": [
{
"filename": "examples/tailwind-conflict.jsx",
"issues": [
{
"type": "tailwind-conflict",
"category": "padding",
"classes": ["p-4", "px-8"],
"confidence": "medium",
"riskScore": 55,
"nextStep": "Choose one utility from the conflicting set or split the classes by scope.",
"requiresUserConfirmation": true
}
]
}
]
}
passed: true means no hard errors. clean: true means zero issues of any kind.
stylesafe <file> — analyze a single filestylesafe <dir> — analyze a directory recursivelystylesafe --projectRoot <dir> — same as abovestylesafe --changed — analyze git-changed files (for PR/CI)stylesafe --changed --fail-on-issues — exit with code 1 if any issues foundstylesafe --watch src — re-run on every file changenpm test — run regression testsPlace a .styleintegrityrc file in your project root:
{
"ignore": ["dist", "*.min.css"],
"failOn": ["error", "warning"]
}
Add to .github/workflows/style-check.yml:
name: stylesafe
on:
pull_request:
push:
branches: [main]
jobs:
stylesafe:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: 20
- run: npm install
- run: node server.js --changed --fail-on-issues
FAQs
MCP server and CLI that catches CSS cascade conflicts and Tailwind utility clashes before they ship.
The npm package stylesafe receives a total of 2 weekly downloads. As such, stylesafe popularity was classified as not popular.
We found that stylesafe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.