
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
chargebee-js
Advanced tools
chargebee-js is npm package to include Chargebee's browser script, instead of adding it as script tag in HTML pages for JS frameworks.
Use Chargebee.js as an ES module.
Note: To be PCI compliant, you must load Chargebee.js directly from https://js.chargebee.com. You cannot include it in a bundle or host it yourself. This package wraps the global Chargebee function provided by the Chargebee.js script as an ES module.
Calling loadChargebee always loads the latest version of Chargebee.js, regardless of which version of chargebee-js you use. Updates for this package only impact tooling around the loadChargebee helper itself and the TypeScript type definitions provided for Chargebee.js. Updates do not affect runtime availability of features of Chargebee.js.
You can install the library using npm or yarn:
npm install chargebee-js
# or
yarn add chargebee-js
Inside your JavaScript code, initialize chargebee and get Chargebee instance object. This object can further be used for enabling payment integrations, analytics like Google Analytics and Facebook pixel tracking, checkout and portal integrations and more.
import { loadChargebee } from "chargebee-js";
const cbInstance = loadChargebee({
site: "site-name", // your test site
domain: "https://mybilling.acme.com" // this is an optional parameter.
})
FAQs
Javascript Client SDK to implement Chargebee on frontend.
The npm package chargebee-js receives a total of 1,393 weekly downloads. As such, chargebee-js popularity was classified as popular.
We found that chargebee-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.