
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@pipe0/client-sdk
Advanced tools
[Pipe0](https://pipe0.com) is a framework for data enrichment. If you have some data about a person or company but want more, you can do that in an infinite number of ways with pipe0.
Pipe0 is a framework for data enrichment. If you have some data about a person or company but want more, you can do that in an infinite number of ways with pipe0.
The ability to enrich data is a requirement for many apps. You may dream of a CRM that updates itself or a sales copilot helping SDRs prepare for upcoming meetings. Data enrichment enables these features but is surprisingly hard to build.
At pipe0, we're on a mission to build the fastest, most extensible data enrichment framework in the world.
Here are some things pipe0 does for you:
This package contains the browser SDK for pipe0. It is written in TypeScript and contains many useful types and utilities for building UI-based apps based on pipe0.
The main way to interact with the SDK is the Pipe0 class. Use it like this.
export const pipe0 = new Pipe0({ url: YOUR_SERVER_URL });
const req = pipe0.request
.create({
pipes: initialPipeList,
input: initialInput,
fieldAnnotations,
})
.validate()
.getResponse();
const res = await req.send();
The term framework may surprise you because pipe0 is an API, dashboard, and SDK.
While you can perform powerful enrichments in just 10 lines of code, you can choose to express logic and direction of data flow with it, too.
The following is an example of an enrichment flow that requires logic.
FIND phone number of person
IF found
FIND website of current employer
IF NOT found
FIND work email address
Your first instinct might be to implement this with code. However, pipe0 offers a much simpler way to express this and removes brittle spaghetti code once and for all.
FAQs
[Pipe0](https://pipe0.com) is a framework for data enrichment. If you have some data about a person or company but want more, you can do that in an infinite number of ways with pipe0.
We found that @pipe0/client-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.