
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
DogecoinJS The Goodest Way to get Dogecoin info and events for the Web and NodeJS!
We built this Dogecoin javascript library live on Twitch for the Comfy Corner!
dogecoinjsnpm install dogecoinjs --save
var Dogecoin = require( "dogecoinjs" );
Dogecoin.lookup( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( wallet ) => {
console.log( wallet );
} );
Dogecoin.listen( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( address, amount, extra ) => {
console.log( "Wallet balance update!", address, amount, extra );
});
dogecoinjs from the public folder or include from the JSDelivr CDN:<script src="dogecoin.min.js"></script>
OR
<script src="https://cdn.jsdelivr.net/npm/dogecoinjs@latest/public/dogecoin.min.js"></script>
<html>
<head>
<script src="https://cdn.jsdelivr.net/npm/dogecoinjs@latest/public/dogecoin.min.js"></script>
</head>
<body>
<script type="text/javascript">
Dogecoin.lookup( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( wallet ) => {
console.log( wallet );
} );
Dogecoin.listen( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( address, amount, extra ) => {
console.log( "Wallet balance update!", address, amount, extra );
});
</script>
</body>
</html>
You can lookup the balance of any dogecoin wallet by passing an address and a handler:
Dogecoin.lookup( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( wallet ) => {
console.log( wallet );
} );
Or by using async/await and getting the wallet info returned:
let wallet = await Dogecoin.lookup( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht" );
console.log( wallet );
Get the QR Code image of any dogecoin wallet by passing an address and a handler:
Dogecoin.qrcode( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( data ) => {
var image = document.getElementById( "qrcode" );
image.src = URL.createObjectURL( data );
} );
Or by using async/await and getting the wallet QR code returned:
let qrcode = await Dogecoin.qrcode( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht" );
var image = document.getElementById( "qrcode" );
image.src = URL.createObjectURL( qrcode );
Get notified of changes to a wallet balance in real-time:
Dogecoin.listen( "DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht", ( address, amount, extra ) => {
console.log( "Wallet balance update!", address, amount, extra );
});
Like these projects? The best way to support my open-source projects is by becoming a Comfy Sponsor on GitHub!
Come and hang out with us at the Comfiest Corner on Twitch!
Such coin. Much thanks!
DPsvmxqaJV15nqVnT9BiwYskVmQLozRKht
Dogecoin blockchain data is available thanks to DogeChain!
Thank you to everyone who joined in during the creation of this project!
LilyHazel, Instafriend, Instafluff, DevMerlin, aries4174599, That_MS_Gamer, generalgooglelos, aRandomTim, simrosie4u, Eclipse_Arc, Floydan, m_a_t_t_y___, mikenatsu24, venusslipper, theArtifacts, YourFriendTyler33, MisigaSan, ShadowNeverSeen, aisu_kurimu, durian_gray, d3m1g0d__, KanawanagasakiYoko, Masaki_tty, N3m1sys, DFluxk, nolanpfeiffersaiyan, iknowandidrinkthings, mrpotatodice, Shpoopdy, RafaelPaul, saramara79, lilsafbig, DutchGamer46, AnnaCodes, RiccaRomano, stabbykirby, JupiterZky, allie__, sparky_pugwash, Here_for_the_life_lessons, sethorizer, GanaXE, DvDty, GhosT_TanK83, Gawhisper, Wietlol, MerlinLeWizard, JamesMontemagno, Alca, one1lion, pathaan, hugthedumdum, TofuLock, definiteoptimist, Roxkstar74, Taugeshtu, Mheetu, ricardosexyboyy06, InSanityParty, nopogo_tv, eno_dev, AntiPixelated, hadouken11, seasidesandies, calhartill, NamasteGeek, Alphena, ShiDotMoe, Loganshogun, FuriousFur, Froggo1214, Hot_Zoomy, youcantescapefromme2, Ellenary, TheDankOreo, InvaderWaffles, churzaki, Longttran, DreamGardenPanda, Yuukez, holloway87
FAQs
The Comfiest Way to get Dogecoin info and events for the Web and NodeJS!
The npm package dogecoinjs receives a total of 4 weekly downloads. As such, dogecoinjs popularity was classified as not popular.
We found that dogecoinjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.