
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
wx-svelte-core
Advanced tools
SVAR Svelte Core library, a collection of form controls and UI components
SVAR Core library offers a set of 20+ ready-made Svelte UI components: form controls, popups, date and time picker, toast notifications, and more. All components are lightweight, responsive, fast-performing, and available in light and dark skins.
In addition to the Core library, you can use the following SVAR components to build unified app UIs:
To use any of the Core components, simply import the package and include the desired component in your Svelte file:
<script>
import { Button } from "wx-svelte-core";
</script>
<Button>Click me</Button>
See the getting started guide to quickly set up and begin using SVAR Core components in your Svelte projects.
Typically, you don't need to modify the code. However, if you wish to do so, follow these steps:
yarn
to install dependencies. Note that this project is a monorepo using yarn
workspaces, so npm will not workyarn start
To run the test:
yarn start:tests
yarn test:cypress
Join our community forum to get help or submit feature requests.
FAQs
SVAR Svelte Core - Svelte UI library of 20+ components and form controls
The npm package wx-svelte-core receives a total of 0 weekly downloads. As such, wx-svelte-core popularity was classified as not popular.
We found that wx-svelte-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.