
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
dynamo-entity-manager
Advanced tools
A entity manager for AWS Dynamo. It's a class that tracks some entities loaded from dynamo data base (or created to be persisted in that data base), and that when flushing, it persist the state change in that data base.
Requires aws-sdk package (if executed in AWS Lambda, it is already installed). For transactional flush, aws-sdk should be included in your lambda, as installed in cloud is an old version.
npm install --save-dev aws-sdk
Build the js files from typescript:
npm run build
Running tests:
npm run test
Running style check:
npm run style
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
We use SemVer for versioning. For the versions available, see the tags on this repository.
This project is licensed under the ISC License - see the LICENSE.md file for details
FAQs
Entity manager for Amazon DynamoDB NoSQL database
We found that dynamo-entity-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.