
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Iestyn's atomic, functional, CSS-in-JS library
Atomic: Each rule defines one (or very few) styles, which you then compose together to create the UI you want. Instead of .button
or .my-cool-component
or .i__love--bem
classnames, you have .fg_white
(which sets the foreground to white), or .pam
(which sets medium padding on each axis of the element) etc.
Functional: Forget about the cascade, forget about side effects. Yons classnames do what they say on the tin and nothing else.
CSS-in-JS: Uses glamor under the hood, so doesn't have all the issues of inline-styles. Writing a web app without using JavaScript? This library ain't for you.
import React from 'react';
import c from 'classnames';
import y from 'yons';
// React
const FooBar = () => (
<div className={c(y.bg_black, y.fg_white)}>
White text on black!
</div>
);
// Or not
document.body.className = c(y.b,y.ttu,y.f1,y.fg_green)
// now your body tag will be bold, uppercase, massive, and green
Install with yarn (or npm if that's what you fancy).
You also need to install glamor
as it's a peerDependancy of this module (this is because glamor must be used as a singleton).
$ yarn add yons
$ yarn add glamor
Take a look inside the src
folder. It's all pretty self-documenting.
Of particular note are skin.js
(for setting colours of stuff) and spacing.js
(for setting margins and padding).
FAQs
An atomic CSS library with glamor under the hood
The npm package yons receives a total of 0 weekly downloads. As such, yons popularity was classified as not popular.
We found that yons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.