
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
fileExists. returns true if file exists @param {String} path file_exists(path)
fileNotExists. @param {String} path file_not_exists(path)
ls_dir list all file from directory path this function returns a list of all values from a directory @param String path ls_dir(path)
list directories. this function returns a list of directoris with in the passed directory @param String path ls_dirs(path)
list all files in directory this function returns a list of files with in the passed directory @param String path ls_files(path)
mkdir. this is a humble function that make a directory that is passed if creates the directories recursibly @param {string} path to directory relative paths are from the current working dir ex:./data/mined/companies mkdir(path)
write_file this is a humble function that make a file a writes a string on it @param {string} path to directory @param {string} string to be written write_file((path, string = ''))
read_file reads a text from a file returns as a string @param {string} path to directory read_file(path)
mv remove an file @param {String} from_path @param {String} to_path mv(from_path, to_path)
rm_file remove an file @param {String} path rm_file(pat)
rm_dir remove an directory, with options can be passed @param {String} path @obj { recursive: true force: true } options rm_dir(path, options)
write_json. @param {} obj @param {} path write_json(obj, path)
read_json. @param {} path read_json(path)
delete_json. @param {} path delete_json(path)
read_binary. this function reads a binary file from disk return a binary buffer obj @param {} path read_binary(path)
write_binary. this function writes down a binary file to disk from a binary buff @param {} buff @param {} path write_binary(buff, path)
write_binstr. this function writes down a binary string to disk @param {} bin_string @param {} path write_binstr(bin_str, path)
FAQs
This is my personal library for handling files in nodejs
We found that files_js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.