
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
asposediagramcloud
Advanced tools
Node.js Cloud SDK wraps Aspose.Diagram REST API so you could seamlessly integrate Microsoft Visio® file generation, manipulation, conversion & processing features into your own Node.js applications.
Aspose.Diagram Cloud SDK for Node.js helps you develop Visio file manipulation applications while using the REST API. Diagram Cloud SDK allows your applications to work with Microsoft Visio Object Model in order to create the diragrams from scratch, edit existing diagrams or convert diagrams to popular formats including PDF, HTML, images and other Visio formats.
Please refer to Developer's Guide to see what else you can achieve.
Added support to draw following objects on a page:
Added support to:
For the detailed notes, please visit Aspose.Diagram Cloud 20.3 Release Notes.
Microsoft Visio: VSDX, VSX, VTX, VDX, VSSX, VSTX, VSDM, VSSM, VSTM
Fixed Layout: PDF, XPS Images: JPEG, PNG, BMP, TIFF, SVG, EMF Web: HTML Other: XAML, SWF
Microsoft Visio: VDW, VSD, VSS, VST
Since version 19.10, SDK includes support of storage operations for better user experience and unification, so now there's no need to use 2 different SDKs!
It gives you an ability to:
Firstly, create an account at Aspose for Cloud to get your application information and free quota to use the API. Now execute npm install aspose-diagram-cloud-node --save from the command line to install Aspose.Diagram Cloud SDK for Node.js via NPM.
The complete source code is available at GitHub Repository.
const { DiagramFileApi, DiagramFile_PutCreateRequest } = require("asposediagramcloud");
var AppSid = ""
var AppKey = ""
diagramFileApi = new DiagramFileApi(AppSid, AppKey);
var req = new DiagramFile_PutCreateRequest();
req.name = "output.vdx";
req.isOverwrite = true;
diagramFileApi.diagramFilePutCreate(req).then((result) => {
console.log('API Response:', result);
}).catch(function(err) {
// deal with error
console.log('Error:', err);
});
const { DiagramFileApi, DiagramFile_PostSaveAsRequest, FileFormatRequest } = require("asposediagramcloud");
var AppSid = ""
var AppKey = ""
diagramFileApi = new DiagramFileApi(AppSid, AppKey);
var StorageApi = require("asposestoragecloud")
var config = {'appSid':AppSid, 'apiKey':AppKey};
var storageApi = new StorageApi(config);
var fileName = 'template.vsd';
var data_path = '../your path/';
storageApi.PutCreate(fileName, versionId=null, storage=null, file= data_path + fileName , function(responseMessage) {
console.log('status:', responseMessage.status);
console.log('body:', responseMessage.body);
});
var req = new DiagramFile_PostSaveAsRequest();
var format = new FileFormatRequest();
format.format = "pdf";
req.name = fileName;
req.isOverwrite = true;
req.newfilename = "output.pdf";
req.format = format;
diagramFileApi.diagramFilePostSaveAs(req).then((result) => {
console.log('API Response:', result);
}).catch(function(err) {
// deal with error
console.log('Error:', err);
});
Product Page | Documentation | Live Demo | API Reference | Code Samples | Blog | Free Support | Free Trial
FAQs
Aspose.Diagram Cloud SDK for Node.js
We found that asposediagramcloud demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.