
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@hivechain/hivejs
Advanced tools
Hivejs the JavaScript API for Hive blockchain
Here is full documentation: https://github.com/openhive-network/hivejs/tree/master/doc
<script src="./hivejs.min.js"></script>
<script>
hivejs.api.getAccounts(['ned', 'dan'], function(err, response){
console.log(err, response);
});
</script>
https://cdn.jsdelivr.net/npm/@hivechain/hivejs/dist/hivejs.min.js
<script src="https://cdn.jsdelivr.net/npm/@hivechain/hivejs/dist/hivejs.min.js"></script>
Please have a look at the webpack usage example.
$ npm install @hivechain/hivejs --save
https://api.hive.blog By Default
https://anyx.io
https://api.openhive.network
https://api.hivekings.com
https://rpc.esteem.app
var hivejs = require('@hivechain/hivejs');
var wif = hivejs.auth.toWif(username, password, 'posting');
hivejs.broadcast.vote(wif, voter, author, permlink, weight, function(err, result) {
console.log(err, result);
});
hivejs.api.getAccounts(['ned', 'dan'], function(err, result) {
console.log(err, result);
});
hivejs.api.getState('/trends/funny', function(err, result) {
console.log(err, result);
});
var reputation = hivejs.formatter.reputation(user.reputation);
console.log(reputation);
Hivejs requires some configuration to work on the public Hive testnet.
You need to set two Hive API options, address_prefix and chain_id.
hivejs.api.setOptions({
address_prefix: 'TST',
chain_id: '46d82ab7d8db682eb1959aed0ada039a6d49afa1602491f93dde9cac3e8e6c32',
useTestNet: true,
});
The Chain ID could change. If it does, it may not be reflected here, but will be documented on any testnet launch announcements.
Patches are welcome! Contributors are listed in the package.json file. Please run the tests before opening a pull request and make sure that you are passing all of them. If you would like to contribute, but don't know what to work on, check the issues list or on Discord channel #javascript https://discord.gg/gWGyFy9.
When you find issues, please report them!
MIT
FAQs
Hivejs the JavaScript API for Hive blockchain
We found that @hivechain/hivejs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.