
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@nacho-ui/button
Advanced tools
Addon under the Nacho UI inititative to be a reusable component for various types of buttons
Addon under the Nacho UI inititative to be a reusable component for various types of buttons
ember install @nacho-ui/button
The NachoToggle component is used when the user wants to switch between two states, and each state option is made
known to them by label before they actually click on the toggle. The different between this and a radio button or
checkbox is that those generally represent a true or false value on a single property, whereas we generally
would view a toggle as a switch between two entirely different values for a single property.
{{nacho-toggle
value=value
leftOptionValue=leftValue
leftOptionText=leftValue
rightOptionValue=rightValue
rightOptionText=rightValue
onChange=(action "onChangeValue")
}}
The NachoSortButton component is used when we want to display a button option to sort some list that has been associated with the button
{{nacho-sort-button
isSorting=isSortingABoolean
sortDirection=sortDirectionAString
sortValue="pokemon"
class="test-sort-button"
baseClass="test-sort-button"
onChange=(action "onChangeSortProperty")
}}
The sort button component also has a helper function that can be used by consuming components if you follow
a certain sorting convention and helps cycle through sorting scenarios so that you don't have to rewrite the
same logic over and over. Provide the component context, the key for isSorting and sortDirection and expect
mutation of these properties accordingly in the order of no sort => sort ascending => sort descending
import { SortDirection, cycleSorting } from '@nacho-ui/button/components/nacho-sort-button';
export default class TestSortButton extends Component {
isSorting = false;
sortDirection = SortDirection.ASCEND;
// ... Other codes
@action
onChangeSortProperty(): void {
cycleSorting(this, 'isSorting', 'sortDirection');
}
};
git clone <repository-url>cd nacho-buttonyarn installyarn lint:hbsyarn lint:jsyarn lint:js --fixember test – Runs the test suite on the current Ember versionember test --server – Runs the test suite in "watch mode"ember try:each – Runs the test suite against multiple Ember versionsember serveFor more information on using ember-cli, visit https://ember-cli.com/.
This project is licensed under the MIT License.
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.