
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@bufbuild/protobuf
Advanced tools
Protocol Buffers for ECMAScript. Fully compliant with the Protobuf conformance tests.
This package provides the runtime library for the protoc-gen-es code generator plugin.
A complete implementation of Protocol Buffers in TypeScript, suitable for web browsers, Node.js, Deno, and Bun, created by Buf.
Protobuf-ES is a solid, modern alternative to existing Protobuf implementations for the JavaScript ecosystem. It provides a comprehensive plugin framework and decouples the base types from RPC functionality.
Some additional features:
protocnpm install @bufbuild/protobuf
To learn how to work with @bufbuild/protobuf, check out the docs for the Runtime API
and the generated code.
Official documentation for the Protobuf-ES project can be found at protobufes.com.
For more information on Buf, check out the official Buf documentation.
A complete code example can be found in the Protobuf-ES repo here.
protobufjs is a popular library for working with Protocol Buffers in JavaScript. It provides similar functionalities to @bufbuild/protobuf, such as defining, serializing, and deserializing protobuf messages. However, protobufjs has been around longer and has a larger user base.
google-protobuf is the official Protocol Buffers library for JavaScript provided by Google. It offers core functionalities for working with protobufs, including message definition, serialization, and deserialization. Compared to @bufbuild/protobuf, google-protobuf is more closely aligned with Google's protobuf ecosystem.
FAQs
Protocol Buffers for ECMAScript. Fully compliant with the Protobuf conformance tests.
The npm package @bufbuild/protobuf receives a total of 20,006,595 weekly downloads. As such, @bufbuild/protobuf popularity was classified as popular.
We found that @bufbuild/protobuf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.