Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@axiomhq/js
Advanced tools
Install using npm install
:
npm install @axiomhq/js
If you use the Axiom CLI, run eval $(axiom config export -f)
to configure your environment variables.
Otherwise create a new token in the Axiom settings and export it as AXIOM_TOKEN
.
You can also configure the client using options passed to the constructor of the Client:
import { Axiom } from '@axiomhq/js';
const axiom = new Axiom({
token: process.env.AXIOM_TOKEN,
});
You can then ingest data like this:
axiom.ingest('my-dataset', [{ foo: 'bar' }]);
await axiom.flush();
Note that the client is automatically batching events in the background, in most cases you'll only want to call
flush()
before your application exits.
And query data like this:
const res = await axiom.query(`['my-dataset'] | where foo == 'bar' | limit 100`);
console.log(res);
For further examples, head over to the examples directory.
To capture errors, you can pass a method onError
to the client:
let client = new Axiom({
token: '',
...,
onError: (err) => {
console.error('ERROR:', err);
}
});
by default onError
is set to console.error
.
Starting from v1.0.0
the SDK supports the Annotations API. You can create annotations like this:
// import the annotations module
import { annotations } from '@axiomhq/js';
// create a client
const client = new annotations.Service({ token: process.env.AXIOM_TOKEN });
Then create an annotation like this:
await annotations.create({
type: 'deployment',
datasets: ['dataset_name'],
title: 'New deployment',
description: 'Deployed version 1.0.0 with fixes for ...',
})
FAQs
The official javascript bindings for the Axiom API
The npm package @axiomhq/js receives a total of 49,434 weekly downloads. As such, @axiomhq/js popularity was classified as popular.
We found that @axiomhq/js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.