
Research
6 Malicious Packagist Themes Ship Trojanized jQuery and FUNNULL Redirect Payloads
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.
@mittwald/api-client-commons
Advanced tools
Common code base used by @mittwald/api-client-* package.
The API client does not validate any response status by design, to give you the
most flexibility while handling also erroneous responses. If you want to assert
some desired response status, you can use the assertStatus resp.
assertOneOfStatus function.
Returns: void
This method throws an ApiClientError if the given response does not match
the expectedStatus.
When you are using TypeScript this function also asserts the correct response type.
const response = await client.project.getProject({
pathParameters: {
projectId: "...",
},
});
assertStatus(response, 200);
const project = response.data;
// Project properties can now be accessed safely
const name = project.name;
Returns: void
This method throws an ApiClientError if the given response does not match
the expectedStatus.
When you are using TypeScript this function also asserts the correct response type.
const response = await client.project.getProject({
pathParameters: {
projectId: "...",
},
});
assertOneOfStatus(response, [200, 404]);
if (!response.data) {
console.log("Project not found");
}
To make it easy to opt in to some API mechanisms, a few interceptors can be easily configured.
In most cases you want to add the users access token to every API-Request as a
request header. This can be tedious if you need to do this on your own. To
automatically set the request header use withAccessToken for your APIClient
instance.
const client = new APIClient({ baseURL });
const authenticatedClient = withToken(client, token);
To opt in into the
event consistency handling
you might use withEventConsistencyHandling. This will set automatically handle
the etag response header and set its value as if-event-reached request
header for GET requests:
const client = new APIClient({ baseURL });
const authenticatedClient = withEventConsistencyHandling(client);
FAQs
Common types and utilities for mittwald API clients
The npm package @mittwald/api-client-commons receives a total of 1,058 weekly downloads. As such, @mittwald/api-client-commons popularity was classified as popular.
We found that @mittwald/api-client-commons demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.

Security News
The GCVE initiative operated by CIRCL has officially opened its publishing ecosystem, letting organizations issue and share vulnerability identifiers without routing through a central authority.

Security News
The project is retiring its odd/even release model in favor of a simpler annual cadence where every major version becomes LTS.