
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
express-response-error
Advanced tools
Convenience methods for error responses wrapped in express middleware.
Send errors easily right from response object (eg. res.notFound('not found') -> 404 {"error":"not found"}).
var express = require('express');
var expressResponseError = require('express-response-error');
app = new express();
var options = {};
app.use(expressResponseError(options));
app.get('/test/forbidden',(req,res,next)->
res.forbidden('this resource is forbidden');
)
app.get('/test/custom',(req,res,next)->
res.error('something bad has happened',444);
)
// handle formatting to suite your needs
app.use((err,req,res,next)->
res.status(err.code).send({error: err.message})
)
app.listen(process.env.PORT)
curlify - return curl for requestlogging - log every error payload with console.errorstackLogging - include error stack in payloadtranslation - translate error message (default null)
i18n to use translation for i18n) var express = require('express');
var expressResponseError = require('express-response-error');
var i18n = require('i18n');
i18n.configure({
locales:['en','de']
})
app = new express();
var options = {
translate:'i18n'
};
app.use(expressResponseError(options));
app.use(i18n.init)
app.get('*',(req,res,next)->
res.error('SOME_ERROR'); // this message gets translated with dictionary
)
app.listen(process.env.PORT)
If you app is not running in production (process.env.NODE_ENV == 'production') or if you specify ?debug=1 in request stack is returned in response.
FAQs
Convenience methods for error responses wrapped in express middleware.
We found that express-response-error demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.