
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@certd/cv4pve-api-javascript
Advanced tools
Proxmox VE Client API JavaScript
______ _ __
/ ____/___ __________(_)___ _ _____ _____/ /_
/ / / __ \/ ___/ ___/ / __ \ | / / _ \/ ___/ __/
/ /___/ /_/ / / (__ ) / / / / |/ / __(__ ) /_
\____/\____/_/ /____/_/_/ /_/|___/\___/____/\__/
Corsinvest for Proxmox VE Api Client (Made in Italy)
Copyright: Corsinvest Srl For licensing details please visit LICENSE
This software is part of a suite of tools called cv4pve-tools. If you want commercial support, visit the site
The client is generated from a JSON Api on Proxmox VE.
The result is class Result and contain methods:
From version 6.2 of Proxmox VE is possible to use Api token. This feature permit execute Api without using user and password. If using Privilege Separation when create api token remember specify in permission. Format USER@REALM!TOKENID=UUID
const pve = require('./src');
async function foo() {
var client = new pve.PveClient('10.92.90.101', 8006);
//client.logEnabled = true;
//client.apiToken = '';
var login = await client.login('root', process.env.PVE_PASSWORD, 'pam');
if (login) {
console.log((await client.get('/version')).response);
console.log((await client.version.version()).response);
console.log((await client.get('/nodes')).response);
console.log((await client.nodes.index()).response);
console.log((await client.get('/nodes/cv-pve01/qemu')).response);
console.log((await client.nodes.get('cv-pve01').qemu.vmlist(0)).response);
console.log((await client.get('/nodes/cv-pve01/qemu/103/config/')).response);
console.log((await client.nodes.get('cv-pve01').qemu.get(103).config.vmConfig()).response);
console.log((await client.get('/nodes/cv-pve01/qemu/103/snapshot/')).response);
console.log((await client.nodes.get('cv-pve01').qemu.get(103).snapshot.snapshotList()).response);
}
}
FAQs
Proxmox VE Client API JavaScript
We found that @certd/cv4pve-api-javascript demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.