
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
node-livedocx
Advanced tools
Generate PDF and Word documents from template, using node.js and the livedocx webservice
Node-livedocx allows developers to generate documents by combining structured data from node.js with a template, created in a word processor. The resulting document can be saved as a PDF, DOCX, DOC or RTF file. The concept is the same as with mail-merge.
This library may be used as 'middleware': just pass a callback function. Any error in the generation process will be propagated as the first argument of the callback function. See example below.
var fs = require('fs'), livedocx = require('node-livedocx'), options;
options = {
template: fs.readFileSync('my_template.docx').toString('base64'),
variables: {
foo: 'bar',
something: 'else'
...
},
...
}
livedocx(options, function (err, resultBuffer) {
if (err) {
return console.log('Something went wrong!', err);
}
fs.writeFile('result.pdf', resultBuffer);
});
Step 1: Sign up for an account
Before you can start using LiveDocx, you must first sign up for an account, see:
https://www.livedocx.com/user/account_registration.aspx
(250 free documents per day, see http://www.livedocx.com/pub/pricing for additional plans)
Step 2: Install node-livedocx.
run npm install node-livedocx
Step 3: Assign your options (username, password, template and variables) and your callback function.
The callback function receives any errors and a Buffer-object for the resulting document.
See example/index.js for a full example on how to set these variables properly
Step 4: Learn more
For more information on template options, see http://www.livedocx.com/pub/documentation/templates.aspx
For more information on the used web service, see http://www.livedocx.com/pub/documentation/api.aspx
{
username: 'my_username', // REQUIRED: your username @ http://www.livedocx.com/
password: 'my_password', // REQUIRED: your password @ http://www.livedocx.com/
template: 'SGVsbG8gV29ybGQ=......', // REQUIRED: A base64 encoded string version of a binary file, see example/index.js for an example
templateFormat: 'DOCX', // Default: DOCX. Describe the type of template used. May be one of DOCX, DOC, RTF
resultFormat: 'PDF', // Default: PDF. Describe the type of result document. May be one of DOCX, DOC, RTF and PDF
variables: {
foo: 'bar', //all your document variables
...
}
}
The author is not in any way related to the Livedocx service or the company behind that service.
FAQs
Generate PDF and Word documents from template, using node.js and the livedocx webservice
We found that node-livedocx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.