
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
vue组织树插件
# install dependencies
npm install li_orgtree
1、data:数据
{
id: 0,
label: "XXX科技有限公司",
expand: false,
children: [
id: 0,
label: "XXX科技有限公司",
expand: false,
]
}
2、horizontal:Boolean,false横向/true纵向显示,默认是true 3、labelClassName:自定义节点的class名 4、expand:Boolean,初始化是否展开所有节点,默认false
# 节点单击事件
on-node-click,返回当前鼠标对象和节点数据
# 获取图的所有数据
getData()
# 1、修改节点
鼠标单击选中节点后,按回车键,或者直接双击节点
# 2、添加子节点
鼠标单击选中节点后,按方向 ↓
# 3、删除节点
鼠标单击选中节点后,按del删除键

<template>
<div id="app">
<OrgTree :data="data" :label-class-name="labelClassName" @on-node-click="onNodeClick" ref="orgTree"></OrgTree>
<div>
<button v-on:click="getData()">获取数据</button>
</div>
</div>
</template>
<script>
export default {
name: 'app',
data () {
return {
data: {
id: 0,
label: "XXX科技有限公司",
expand: false,
children: [
{
id: 2,
label: "产品研发部",
children: [
{
id: 5,
label: "研发-前端"
},
{
id: 6,
label: "研发-后端"
},
{
id: 91,
label: "UI设计"
},
{
id: 10,
label: "产品经理"
}
]
},
{
id: 3,
label: "销售部",
children: [
{
id: 7,
label: "销售一部"
},
{
id: 8,
label: "销售二部"
}
]
},
{
id: 4,
label: "财务部"
},
{
id: 9,
label: "HR人事"
}
]
},
horizontal: false,
collapsable: false,
labelClassName: "bg-white"
}
},
methods: {
/**
* 单机节点
*/
onNodeClick(e, data) {
},
// 获取数据
getData(){
console.log(this.$refs.orgTree.getData());
}
}
}
</script>
FAQs
vue组织树插件
We found that li_orgtree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.