
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
This is Oracle Cloud Infrastructure SDK for TypeScript and JavaScript. This project is open source and maintained by Oracle Corp. The home page for the project is Oracle Cloud Infrastructure SDK for TypeScript and JavaScript.
Use the following command to install this SDK:
npm install oci-sdk
Alternatively you can git clone this repo.
To start working with the SDK for TypeScript and JavaScript, you import the service package, create a client, and then use that client to make calls. Refer to examples section for examples on how to make requests.
Before using the SDK, set up a config file with the required credentials. See SDK and Tool Configuration for instructions.
The oci-typescript-sdk contains the following:
Service packages: All packages except common and any other package found inside lib. These packages represent
the Oracle Cloud Infrastructure services supported by the SDK for TypeScript and JavaScript. Each package represents a service.
These packages include methods to interact with the service, structs that model
input and output parameters, and a client struct that acts as receiver for the above methods.
Common package: Found in the common directory. The common package provides supporting functions and structs used by service packages.
Includes HTTP request/response (de)serialization, request signing, JSON parsing, pointer to reference and other helper functions. Most of the functions
in this package are meant to be used by the service packages.
Examples can be found in the examples section
Full documentation can be found on the sdk for typescript and javascript documentation site.
The SDK for TypeScript and JavaScript currently supports NodeJS version 14, 16, 18, 20 and TypeScript version 4.1.3.
The SDK for TypeScript and JavaScript currently supports NodeJS but does not have browser support.
oci-typescript-sdk welcomes contributions from the community. Before submitting a pull request, please review our contribution guide
Oracle gratefully acknowledges the contributions to oci-typescript-sdk that have been made by the community.
Please consult the security guide for our responsible security vulnerability disclosure process
Copyright (c) 2020, Oracle and/or its affiliates. All rights reserved. This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
See LICENSE for more details.
See CHANGELOG.
FAQs
OCI SDK for TypeScript and JavaScript
We found that oci-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.