
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
bitcore-node-monacoin
Advanced tools
A Dash full node for building applications and services with Node.js. A node is extensible and can be configured to run additional services. At the minimum a node has an interface to Dash Core v0.12.1.x for more advanced address queries. Additional services can be enabled to make a node more useful such as exposing new APIs, running a block explorer and wallet service.
npm install -g bitcore-node-dash
Bitcore includes a Command Line Interface (CLI) for managing, configuring and interfacing with your Bitcore Node.
bitcore-node-dash create -d <dash-data-dir> mynode
cd mynode
bitcore-node-dash install <service>
bitcore-node-dash install https://github.com/yourname/helloworld
bitcore-node-dash start
This will create a directory with configuration files for your node and install the necessary dependencies.
Please note that Dash Core v0.12.1.x will be downloaded automatically. Once completed the monacoind binary should be placed into the <dash-data-dir> folder specified during node creation.
For more information about (and developing) services, please see the Service Documentation.
There are several add-on services available to extend the functionality of Bitcore:
Please send pull requests for bug fixes, code optimization, and ideas for improvement. For more information on how to contribute, please refer to our CONTRIBUTING file.
Code released under the MIT license.
Copyright 2013-2015 BitPay, Inc.
FAQs
Full node with extended capabilities using Bitcore and Monacoin Core
We found that bitcore-node-monacoin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.