
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
Easy Axios to use.
npm i foraxios //or yarn add foraxios
import ForAxios from 'foraxios';
// Message is unnecessary
import { Message } from 'element-ui';
const foraxios = new ForAxios({
// Request handler
request(config) {
// config content is api request content.
if (config.isOpenApi === undefined) {
config.headers = {
'token': `Bearer ${localStorage.access_token}`
}
}
},
// Request success handler
success(res) {
// res is api data returned
if (res.code !== 0) {
Message.error(res.msg)
}
return {
...res,
isSuccess: true
}
},
// Request error handler
error(err) {
Message.error(err)
return err
}
})
// Common request
const login = (data) => {
return foraxios.$api(
{
url: `/api/login`,
method: 'post',
data,
name: '用户登录'
}
)
}
// Donwload binary file
const exportFile = (data) => {
return foraxios.$api(
{
url: `/api/export`,
data: {
...data,
fileName: 'export.xlsx'
},
name: 'export file',
type: 'file'
}
)
}
ObjectRequest handler.Request success handler.Request error handler.Request timeout.Request.Is show message on console.ObjectRequest url.Request data.API name.Request method.Set value 'file' then download binary file.Mock DataFAQs
Easy Axios to use.
The npm package foraxios receives a total of 7 weekly downloads. As such, foraxios popularity was classified as not popular.
We found that foraxios demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.