
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
aframe-potree-loader-component
Advanced tools
Loads point clouds using Potree
For A-Frame.
| Property | Description | Default Value |
|---|---|---|
| src | Url to the PointCloud files. Expects a cloud.json | '' |
| pointSize | Semantic size of a single point. The lower the more space is between the points, higher values result in low resolution objects. Has no performance impact. | 1 |
| minimumNodePixelSize | Pixel size of a point within a node. The lower the more points will be shown per octree node. Has performance impact. | 150 |
| pointSizeType | How to point adapts to the camera frustum. Either fixed, adaptive or | adaptive |
| pointShape | The shape of a single point. Either square, circle or | sqaure |
| pointColorType | Type of color of a single point in respect of the pointcloud. See for all possible values. | 'rgb' |
The initial position and rotation is specific for each point cloud and has to be set accordingly.
| Property | Description | Default Value |
|---|---|---|
| pointBudget | Point Budget in millions of all pointclouds in your scene | 1 |
| Property | Description |
|---|---|
| model-loaded | The point cloud had been loaded into the scene |
| model-error | The point cloud could not be loaded loading |
Potree automatically adapts the point budget according to the underlying hardware, that said mobile devices are not so well suited for detailed point cloud representations.
Install and use by directly including the browser files:
<head>
<title>My A-Frame Scene</title>
<script src="https://aframe.io/releases/0.8.0/aframe.min.js"></script>
<script src="https://unpkg.com/aframe-potree-loader-component/dist/aframe-potree-loader-component.min.js"></script>
</head>
<body>
<a-scene potree-loader="pointBudget: 1;">
<a-entity potree-loader="
src: https://cdn.rawgit.com/potree/potree/develop/pointclouds/lion_takanawa;
pointSize: 1;
pointColorType: rgb;
minimumNodePixelSize: 100;
"
position="-1 -1 -5"
rotation="-85 0 0"
></a-entity>
</a-scene>
</body>
Install via npm:
npm install aframe-potree-loader-component
Then require and use.
require('aframe');
require('aframe-potree-loader-component');
This is basically just a wrapper around PIX4D's three-potree-loader package. They did all the hard work (and saved myself lots of time) of extracting the core loading and rendering functionality of the Potree point cloud viewer. That's the spirit of open-source. We all build up on each other and adapt to certain needs, in that case point clouds within WebVR.
FAQs
Loads PointClouds using Potree
We found that aframe-potree-loader-component demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.