
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@3dsource/types-unreal
Advanced tools
A comprehensive collection of TypeScript type definitions for Unreal Engine integration. This library provides type safety for communication between web applications and Unreal Engine.
The types-unreal library offers:
npm >9)This library requires the following peer dependency:
{
"@3dsource/unreal-commands-api-parser": ">=1.1.0"
}
Install the library and ensure the peer dependency is available in your project:
npm i @3dsource/types-unreal @3dsource/unreal-commands-api-parser
Import the types you need in your TypeScript files:
import type { UnrealCommands } from '@3dsource/types-unreal';
import type { MetaBoxCommandPacket } from '@3dsource/types-unreal';
import type { MetaBoxCommandList } from '@3dsource/types-unreal';
import type { FLoopBackCommand } from '@3dsource/types-unreal';
The library provides the following key type categories:
import type { UnrealCommands, MetaBoxCommandPacket } from '@3dsource/types-unreal';
// Type-safe command creation
const command: MetaBoxCommandPacket = {
command: 'SetVisibility',
parameters: {
actorName: 'MyActor',
visible: true,
},
};
// Send command to Unreal Engine
function sendToUnreal(packet: MetaBoxCommandPacket) {
// Implementation
}
sendToUnreal(command);
Types in this package are auto-generated from the Unreal Engine Commands API using the
@3dsource/unreal-commands-api-parser peer dependency. The following scripts are available (see package.json):
src/lib/struct.ts:npm run generate:commands:prod
src/lib/struct.qa.ts:npm run generate:commands:qa
src/lib/struct.dev.ts:npm run generate:commands:dev
Only src/lib/struct.ts is exported by the package public API (src/public-api.ts). The QA/Dev structures are
intended for development purposes and are not exported.
This library works seamlessly with the @3dsource/angular-unreal-module for Angular applications:
import { UnrealModule } from '@3dsource/angular-unreal-module';
import type { UnrealCommands } from '@3dsource/types-unreal';
// Your Angular module configuration
For detailed documentation of all available types, see the source code and comments in the type definition files.
node >=20, npm >9 (see engines in package.json).tslib is included as a dependency of this package.FAQs
A set of types for unreal module using in 3dsource projects
We found that @3dsource/types-unreal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.