
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@verdigris/adonis-compression
Advanced tools
AdonisJs middleware provider that wraps compression module
This repo contains a provider for a middleware that compresses HTTP responses with GZip.
This middleware was originally created to compress verbose JSONAPI responses. If you are considering this middleware for compressing static assets in production, please consider using nginx or lighttpd instead. These servers are vastly superior to Node.js in performance for serving static assets.
Install the provider from npm:
adonis install @verdigris/adonis-compression
Next make sure to read the INSTRUCTIONS.md file.
This repo/branch is intended to run on all major OS platforms and targets
Node.js >= 8.0
Please read CONTRIBUTING.md to learn about the contribution guidelines before contributing to this codebase.
Run the following command to see list of available npm scripts:
npm run
npm run lint
command to check if there are any linting errors.test.failing()
method.Most of the ES6 language features are officially supported on Node.js v8. Please make use of the ES6 language features. For example:
arguments keyword in functions.bind or call. After calling these methods, AdonisJs cannot
guarantee the scope of any methods.This software is distributed AS IS WITHOUT WARRANTY under Simplified BSD license.
Verdigris Technologies Inc. assumes NO RESPONSIBILITY OR LIABILITY UNDER ANY CIRCUMSTANCES for usage of this software. See the LICENSE.md file for detailed legal information.
Copyright © 2019 Verdigris Technologies Inc. All rights reserved.
FAQs
AdonisJs middleware provider that wraps compression module
We found that @verdigris/adonis-compression demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.