
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
simpleicons
Advanced tools
Use a wide-range of icons derived from the simple-icons repo in python. Go to their website for a full list of icons. The slug version must be used for the icon_name. The icons folder that accompanies the package has all the files. The package uses the latest verison of Simple Icons. It does not depend on the filesystem.
Install with pip install simpleicons. Keep in mind that this is a fairly large package due to all the icons.
The API can then be used as follows, where [ICON SLUG] is replaced by a slug:
from simpleicons.all import icons
# Get a specific icon by its slug as:
icons.get('[ICON SLUG]')
# For example:
icon = icons.get('simpleicons')
print(icon.__dict__)
"""
{
'title': 'Simple Icons',
'slug': 'simpleicons',
'hex': '111111',
'source': 'https://simpleicons.org/',
'svg': '<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">...</svg>',
'path': 'M12 12v-1.5c-2.484 ...',
'guidelines': 'https://simpleicons.org/styleguide',
'license': {
type: '...',
url: 'https://example.com/'
}
}
"""
NOTE: The guidelines entry will be None if we do not yet have guidelines data for the icon.
NOTE: The license entry will be None if we do not yet have license data for the icon.
Alternatively you can import the needed icons individually, where [ICON SLUG] is replaced by a slug:
# Import a specific icon by its slug as:
from simpleicons.icons import si_[ICON_SLUG]
# For example:
from simpleicons.icons import si_simpleicons
Lastly, the icons object is also enumerable. This is useful if you want to do a computation on every icon:
from simpleicons.all import icons
for (key, icon in icons) {
# do stuff
}
The XML for each icon can be easily manipulated with either of two functions:
Icon.get_xml(**attrs) -> ElementTree
from simpleicons.icons import si_simpleicons
# blue logo, adds the fill attribute: <svg fill="blue"></svg>
si_simpleicons.get_xml(fill="blue")
Icon.get_xml_bytes(**attrs) -> bytes
from simpleicons.icons import si_simpleicons
si_simpleicons.get_xml_bytes(fill="blue")
In order to use this, you must install the extras: pip install -e simpleicons[imaging] . Icons can be converted to PIL Images with icon_to_image(icon_xml: bytes, bg: int=0xffffff, scale: Tuple[int, int]=(1, 1)) -> Image:
from simpleicons.icons import si_simpleicons
from simpleicons.image import icon_to_image
xml_bytes = si_simpleicons.get_xml_bytes(fill="blue")
# black background and 5x scale
img = icon_to_image(xml_bytes, bg=0x000000, scale=(5, 5))
# manipulate PIL Image
img.putalpha(32)
img.save("simpleicons_blue.png")
FAQs
Use a wide-range of icons derived from the simple-icons/simple-icons repo in python.
We found that simpleicons demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.