
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
Vitals is a module that will collect health statistics for process ids past to it, currently collections cpu time, memory usage and uptime.
Vitals is a module that will collect health statistics for process ids past to it, currently collections cpu time, memory usage and uptime.
$ npm install vitals
interval the interval in which to poll the processes (Default 3000ms)maxSamples the maximum number of samples to retainsampleRate the rate at which to sample data between 0 (disabled) and 1 for 100%, ie: 0.15 for 15% of the timestarted when the monitor is activatedstopped when the monitor has stopped monitoring the processesadded when a process has been added to the monitorremoved when a process has been removed from the monitor, died will be in the meta data if removed due to process stoppingdata the processes health dataInitiate vitals and add processes
var vitals = require('vitals');
Adding processes to vitals
vitals.add(pid, [meta]);
vitals.add([
{pid: pid, meta: meta}
])
Getting monitored processes
var proc = vitals.get(pid);
var procs = vitals.get([pid,pid]);
var procs = vitals.get(function(proc) {
return proc.meta.key == 'value';
});
Removing processes to vitals
vitals.remove(pid);
vitals.remove([pid, pid, pid]);
vitals.remove(function(proc) {
return proc.meta.key = 'value';
})
vitals.remove(); //removes all
Starting / Stopping
vitals.start();
vitals.stop();
Count number of processes being monitored
vitals.length
Sampling Data
vitals.on('data', function(proc, data) {
//proc.meta._samples == Array[data, data, data]
//data.collected is the time the sample was collected
});
var proc = vitals.get(pid);
proc.meta._samples
Events
vitals.on('started', function() {
});
vitals.on('added', function(proc) {
//proc.pid && proc.meta
});
vitals.on('removed', function(proc) {
//proc.pid && proc.meta && proc.meta.died if process exited
})
vitals.on('data', function(proc, data) {
//proc.pid && proc.meta
//data.cputime data.memoryUsage data.uptime
});
vitals.on('stopped', function() {
});
$ npm install
$ npm test
(The MIT License)
FAQs
Vitals is a module that will collect health statistics for process ids past to it, currently collections cpu time, memory usage and uptime.
The npm package vitals receives a total of 32 weekly downloads. As such, vitals popularity was classified as not popular.
We found that vitals demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.