
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
react-webaudio
Advanced tools
Create and update an html5 webaudio "audio graph" using React.
Each component in the React component tree represents an AudioNode. Audio is propagated up the tree branches until it reaches the render root, where the sound data is fed into an AudioDestinationNode and then played to audio output.
React-WebAudio uses React 0.14.
To use it as an npm package just install it
npm install react-webaudio
You will need to do something like
var ReactWebAudio = require('react-webaudio')
and then you can create and render audio graphs.
Checkout from git and run
npm run build
This will package up the react-webaudio components along with React and put the result in build/react-webaudio.js. If you include this into your webpage via a script tag:
<script src="react-webaudio.js"></script>
Then React will appear in the global namespace and the new React Web Audio components are available as ReactWebAudio.
Build a simple tone source which feeds into its parent AudioContext. Once audio gets to the AudioContext node it is rendered to the speakers.
React.createElement(ReactWebAudio.AudioContext,
{},
React.createElement(ReactWebAudio.OscillatorNode,
{frequency:this.props.beepfreq, playing:this.props.playbeep}))
);
Each node feeds audio into the parent node, so a stupidly long filter chain looks like this:
React.createElement(ReactWebAudio.DynamicsCompressorNode,
{threshold:-50, knee:40, ratio:12, reduction:-20, attack:0.1, release:0.1},
React.createElement(ReactWebAudio.BiquadFilterNode,
{frequency: this.props.filterFrequency, type: this.props.filterType},
React.createElement(ReactWebAudio.GainNode,
{gain: this.props.gain},
React.createElement(ReactWebAudio.ConvolverNode,
{bufferAsArray: this.props.reverbImpulseResponse},
React.createElement(ReactWebAudio.DelayNode,
{delayTime: this.props.delayTime},
React.createElement(ReactWebAudio.WaveShaperNode,
{curve: this.props.distortionCurve},
React.createElement(ReactWebAudio.MediaElementAudioSourceNode,
{audioSourceElement: this.props.audioElement}
)
)
)
)
)
)
)
In this case you might want to take advantage of something like lodash's flowRight to compose functions.
For a more complete picture examine the examples/ directory. To try out the examples you can run
npm run dev
and browse to localhost:8080/
Not all nodes are supported yet. Some are hard to test, while others don't fit into the React data flow process very well. Still others are still being defined or redefined in the Web Audio spec. In particular:
FAQs
Construct and update a Web Audio graph using React
The npm package react-webaudio receives a total of 9 weekly downloads. As such, react-webaudio popularity was classified as not popular.
We found that react-webaudio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.