
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
An over-the-wire unidirectional data-flow architecture utilizing Reflux as the flux pattern implementation and SockJS as the websocket implementation.
An over-the-wire unidirectional data-flow architecture utilizing Reflux as the flux pattern implementation and SockJS as the websocket implementation. Use conjunction with condux-client.
npm install condux --save
Builds and returns a Condux Server. A Condux Server listens to client actions via its private CLIENT_ACTIONS
channel. Client actions are registered using <ConduxServer>.createAction or <ConduxServer>.createActions.
Actions must be symmetrically mirrored on the client using <ConduxClient>'s methods
<ConduxClient>.createAction and <ConduxClient>.createActions
Kind: global function
convenience method for <SockJS>.installHandlers(server,options)
Kind: instance method of Condux
| Param | Type | Description |
|---|---|---|
| server | object | http server (express, etc) |
| options | object | passes options as .installHandlers' second argument |
wrapper for Reflux.createAction() that ensures actions are registered with the
Nexus instance. The ConduxServer instance acts as a dispatch for all client actions
registered with it.
Kind: instance method of Condux
| Param | Type | Description |
|---|---|---|
| actionName | string | |
| options | object | Reflux action options object |
wrapper for Reflux.createActions() that ensures each Action is registered on the server nexus
Kind: instance method of Condux
| Param | Type |
|---|---|
| actionNames | array |
objectwrapper for Reflux.createActions() that ensures each Action is registered on the server nexus
Kind: instance method of Condux
Returns: object - a Reflux store
| Param | Type | Description |
|---|---|---|
| topic | string | the name of the channel/frequency the datastore triggers to |
| storeDefinition | object | store methods object, like the one passed to Reflux.createStore |
dummy hook for when a new channel is created
Kind: instance method of Condux
| Param | Type | Description |
|---|---|---|
| topic | string | the name of the newly created channel |
use Adapter when your app already has a sockjs service
Kind: static property of Condux
| Param | Type | Description |
|---|---|---|
| service | object | a SockJS server instance created elsewhere with <SockJS>.createServer |
FAQs
An over-the-wire unidirectional data-flow architecture utilizing Reflux as the flux pattern implementation and SockJS as the websocket implementation.
We found that condux demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.