
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
web-logging-vue
Advanced tools
web-logging-vue 是vue版本的 web-logging。 web-logging是一个纯JavaScript编写的 前端日志管理,用於檢測前端的日志系統。web-logging日志存储为近15天的记录。本庫依賴 amx-indexeddb。
支持Amx技术:
github : https://github.com/SenLiangpi/web-logging
安装 npm i web-logging-amx 在main点引入 web-logging-amx
import web_logging_vue from 'web-logging-vue'
//傳入參數 true 或 false ,true為允許 將渲染dom false 為不允許 將不會渲染
Vue.use(web_logging_vue,true)
//在需要logging日志記錄點引入
import web_logging_vue from 'web-logging-vue'
//記錄日志
web_logging_vue.webLoggingWrite(json)
//日志記錄輸出
web_logging_vue.webLoggingList(startDate,endDate)
webLoggingWrite(json)
/**
* {
* logName: '用于标识日志,例如请求日志、标准错误、标准输出等。',
* remarks: '备注'
* }
*/
webLoggingWrite({logName:'业务逻辑',remarks: '外部引入方法'})
webLoggingList(startDate,endDate)
//startDate 开始时间 endDate结束时间 时间段查询 如果不传值则查询全部
//如果传开始时间 就查询开始时间之后所有的数据 如果传结束时间就查询结束时间之后记录的所有数据 已对应设备的时间为准
webLoggingList(startDate,endDate).then((result) => {
console.log(result)
}).catch((err) => {
console.log(err)
});
皮皮研究所出品
FAQs
web-logging 日志记录 Vue 版本
We found that web-logging-vue demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.