
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@pdftron/pdfnet-node-samples
Advanced tools
This package leverages the full power of Apryse's native SDK for maximal performance and accuracy. In order to maintain consistency across platforms the Javascript API is used in the same manner as the PDFNet API available in Apryse's Web platform. Since access to the filesystem is included in Node.js/Electron some additional APIs requiring filesystem access have also been included.
This package depends on unmanaged add-on binaries, and the add-on binaries are not cross-platform. At the moment we have support for
Installation will fail if your OS, Node.js or Electron version is not supported.
To install for Electron, runtime and target options are needed. For example, For Electron 6, we need to run npm i @pdftron/pdfnet-node --runtime=electron --target=6.0.0. Note that we need to use 6.0.0 for all Electron 6 versions.
Here is a code snippet to demonstrate how to use this package.
const { PDFNet } = require('@pdftron/pdfnet-node'); // you may need to set up NODE_PATH environment variable to make this work.
const main = async() => {
const doc = await PDFNet.PDFDoc.create();
const page = await doc.pageCreate();
doc.pagePushBack(page);
doc.save('blank.pdf', PDFNet.SDFDoc.SaveOptions.e_linearized);
};
// add your own license key as the second parameter, e.g. in place of 'YOUR_LICENSE_KEY'.
PDFNet.runWithCleanup(main, 'YOUR_LICENSE_KEY').catch(function(error) {
console.log('Error: ' + JSON.stringify(error));
}).then(function(){ return PDFNet.shutdown(); });
There are some code samples in the @pdftron/pdfnet-node-samples package.
To get started please see the documentation at https://www.apryse.com/documentation/nodejs/get-started/integration.
Please go to https://www.apryse.com/pws/get-key to obtain a demo license or https://wwww.apryse.com/form/contact-sales to obtain a production key. For further information, please visit https://www.apryse.com/licensing.
FAQs
Sample code for the @pdftron/pdfnet-node package.
The npm package @pdftron/pdfnet-node-samples receives a total of 471 weekly downloads. As such, @pdftron/pdfnet-node-samples popularity was classified as not popular.
We found that @pdftron/pdfnet-node-samples demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.