
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
bodhi-rest-client
Advanced tools
This library lives in artifactory now and will become public soon
npm install bodhi-rest-client
var Client = require('bodhi-rest').Client;
var Basic = require('bodhi-rest').BasicCredential;
var Bearer = require('bodhi-rest').BearerToken;
var agent = require('bodhi-rest').createAgentClient('token', 'my-ns');
var user = require('bodhi-rest').createUserClient('username', 'password', 'my-ns');
###Simple Setup
Let the package do the standard setup and supply the credentials plus the namespace
var agent = require('bodhi-rest').createAgentClient('token', 'my-ns');
var user = require('bodhi-rest').createUserClient('username', 'password', 'my-ns');
###Custom Setup
Take control of the entire setup process.
var Client = require('bodhi-rest').Client;
var Basic = require('bodhi-rest').BasicCredential;
var client = new Client({
uri : 'https://local:1337'
namespace : "miles",
timeout : 4000,
maxConcurrent: 11,
proxy : 'https://localhost:9999',
credentials : new Basic('me', 'secret')
});
###Relative URLs
A relative URL can be specified as a string or an array of path elements that will be concatenated into a string.
client.[<http-operation>]('relative/url', function(err, data, ctx){})
client.[<http-operation>](['resources', 'Store', id], function(err, data, ctx){})
###Absolute URLs
An absolute URL starts with a '/' character and therefore ignores the established namespace. It can be used for public API calls , /me, anything that wants to bypass the namespace.
client.[<http-operation>]('/absolute/url', function(err, data, ctx){})
Sending Data
client.put('/absolute/url' , {/* your updated resource here /}, function(err, data, ctx){}) client.patch('/absolute/url', {/ your patch document here /}, function(err, response, ctx){}) client.post('/absolute/url' , {/ your data here */}, function(err, data, ctx){})
function(err, data, ctx)
###Errors
####System Errors
Same as before ... bad things happen at the infrastructure/runtime layer
####Protocol Errors
Anything with a 4XX or 5XX error code
###Data Element
the ctx is
FAQs
connection to the api server
We found that bodhi-rest-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.