
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@audiowave/core
Advanced tools
Core audio processing utilities and types for AudioWave.
npm install @audiowave/core
import { AudioProcessor } from '@audiowave/core';
// Create configuration with audio format specification
const processor = new AudioProcessor({
bufferSize: 1024,
skipInitialFrames: 2, // Skip first 2 frames to avoid initialization noise
inputBitsPerSample: 16, // 8, 16, 24, or 32-bit audio
inputChannels: 2, // Stereo input (will be mixed to mono for visualization)
});
// Process Buffer data (from Electron, Node.js audio capture)
const audioPacket = processor.process(audioBuffer);
if (audioPacket) {
// timeDomainData is ready for visualization (Uint8Array)
console.log('Processed audio data:', audioPacket.timeDomainData);
}
// Process Float32Array data (from Web Audio API)
const webAudioPacket = processor.process(float32AudioData);
// Reset when starting new stream
processor.reset();
import { process } from '@audiowave/core';
// For simple processing without skip frames
const config = {
bufferSize: 1024,
inputBitsPerSample: 32, // Specify input format
inputChannels: 1, // Mono input
};
const audioPacket = process(rawAudioData, config);
import { convertBufferToWaveData } from '@audiowave/core';
// Convert audio buffer directly to visualization data
const waveData = convertBufferToWaveData(
audioBuffer, // Buffer from audio source
16, // 16-bit audio
2, // Stereo
1024 // Target visualization size
);
// waveData is Uint8Array ready for visualization
console.log('Wave data:', waveData); // [128, 145, 112, ...]
import type { AudioDataProvider } from '@audiowave/core';
const myProvider: AudioDataProvider = {
setupStream: async (config) => {
// Your setup logic
},
onData: (callback) => {
// Your data subscription logic
return () => { /* cleanup */ };
},
onError: (callback) => {
// Optional error handling
return () => { /* cleanup */ };
}
};
import {
isPowerOfTwo,
getNearestPowerOfTwo,
isValidAudioBuffer,
validateAudioConfig
} from '@audiowave/core';
// Check if buffer size is optimal for FFT
console.log(isPowerOfTwo(1024)); // true
// Get nearest power of 2
console.log(getNearestPowerOfTwo(1000)); // 1024
// Validate buffer format
console.log(isValidAudioBuffer(buffer)); // true/false
// Validate configuration
console.log(validateAudioConfig(config)); // true/false
AudioConfig - Configuration for audio processingAudioDataProvider - Interface for audio data sourcesAudioDataPacket - Processed audio dataAudioDataInput - Raw audio data input typesAudioDeviceInfo - Audio device informationAudioProcessor - Stateful audio processor with skip frames support
process(rawData) - Process audio with skip framesreset() - Reset frame counterupdateConfig(config) - Update configurationprocess() - Stateless audio processingconvertBufferToWaveData() - Direct Buffer to visualization data conversionvalidateAudioConfig() - Configuration validationDEFAULT_AUDIO_CONFIG - Default configuration valuesCOMMON_BUFFER_SIZES - Common buffer sizes arrayAUDIO_CONSTANTS - Audio processing constantsMIT
FAQs
Core audio processing utilities and interfaces for AudioWave
We found that @audiowave/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.