
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@usejunior/docx-compare
Advanced tools
@usejunior/docx-compare@usejunior/docx-compare compares two DOCX buffers and returns a DOCX carrying tracked changes.
import { compareDocuments } from '@usejunior/docx-compare';
const result = await compareDocuments(original, revised, {
author: 'Contract review',
date: new Date('2026-08-17T00:00:00.000Z'),
ignoreFormatting: false,
detectMoves: true,
});
The output package always starts from the revised DOCX archive. Safe DOCX adds tagged revision markup to that package while preserving revised-side package metadata and parts, including relationship and content-type topology, section properties, headers and footers, and revision-session identifiers.
Publication fails closed with TaggedPublicationSafetyError when the tagged result cannot satisfy its safety gates. The public API does not silently switch to a legacy reconstruction result.
The public CompareOptions surface no longer accepts engine, comparisonStrategy, reconstructionMode, premergeRuns, or maxWordRefinementChangeRanges. JavaScript callers that pass one of those retired keys receive a TypeError; TypeScript callers receive a type error.
Callers that previously selected reconstructionMode: 'rebuild' received an original-based package. After upgrading, expect revised-side package provenance instead: revised rsids, sectPr, headers and footers, content types, relationships, and other package parts are authoritative. If downstream code compared package metadata or assumed original-side identities, update those assertions to the revised document. Accepting all revisions should reproduce the revised text projection; rejecting all revisions should reproduce the original text projection.
FAQs
DOCX comparison and redline generation for Safe DOCX.
The npm package @usejunior/docx-compare receives a total of 232 weekly downloads. As such, @usejunior/docx-compare popularity was classified as not popular.
We found that @usejunior/docx-compare demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.