
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
simple-queues
Advanced tools
simple-queues is a package for creating a queue structure.
It provides one Queue class you can instanciate and populate with any data you want.
npm install --save simple-queues
yarn add simple-queues
simple-queues exports a Queue class you can import:
// ES6
import { Queue } from "simple-queues";
// ES5
const Queue = require("simple-queues").Queue;
Once imported, you just have to instanciate a Queue and add data to have an usable queue.
import { Queue } from "simple-queues";
const queue = new Queue();
const myData = { id: "some-id" };
queue.enqueue(myData);
queue.enqueue("test1");
queue.dequeue();
simple-queues is maintained by M4dNation Company.
First version written by axelvaindal.
There is actually no other contributors for this project. If you want to contribute, feel free to make any suggestions or to contact us.
We try to keep simple-queues as simple as possible.
Before proposing a PR or opening an issue, please keep in mind :
- This package is meant to be as simple as possible
- This package tries to respect the [Single Responsibility Principle](https://en.wikipedia.org/wiki/Single_responsibility_principle)
- This package tries to use the minimum of dependencies possible
Taking into account the previous points leads us to NOT merge proposed pull-request if those :
- Integrate changes that are too far from the initial purpose of the package
- Integrate changes that are adding additional dependencies
- Integrate changes that are not unit tested and motivationated
This being said, we really welcome pull-request and bug report, so feel free to start a contribution.
Moreover, Pull Requests should always come with related unit tests, and won't be considered if tests aren't included.
simple-queues uses jest for unit testing.
If you don't know about jest yet, you can check out their documentation.
To run the tests, just run :
yarn test
Note that we are using codecov to keep track of code coverage related to our tests and you shouldn't affect negatively the current coverage of the code by removing tests or not covering new features with new unit tests.
simple-queues is available under the terms of the MIT LICENSE.
Check the licence file for more information.
FAQs
Simple queue implementation.
The npm package simple-queues receives a total of 0 weekly downloads. As such, simple-queues popularity was classified as not popular.
We found that simple-queues demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.