
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
wool-model
Advanced tools
A module to provide class to model Command and Event, the building blocks of Wool project Rule engine, CQRS / Event storage approach.
A class to model Command sent to Wool
t Date a timestamp of the command emissiono number an order number for command issued at the same timename string the name of the required commandparam object the parameters key-valueconst cmd = new Command(new Date(), 0, 'walk', {to: 'library', speed: 'normal'})
An Enum of string, with following valid values :
S: the event is a successI: the event is invalid (not validated by rule conditions)E: the event is an error (an unexpected error happened during event treatment)Type: string
if (t === EventStatus.succes) {
...
}
A class to model Event validated, executed and stored by Wool
t Date a timestamp of the event storageo number an order number for events issued at the same timename string the name of the command that trigger the eventdata object the data of the event (derived from command parameters)status EventStatus the status of the eventmessage (string | Error)? for status invalid or error a message detailing the reason of being unsuccessfulCheck if event is a EventStatus.succes
Returns boolean
Check if event is EventStatus.invalid
Returns boolean
Check if event is an EventStatus.error
Returns boolean
A method to make and Event stringify itself
Returns string a stringified Event
A string representation of an Event
Returns string a string representation of an Event
A static method to create EventStatus.succes Event
Returns Event an event derivative from given Command
A static method to create EventStatus.invalid Event
cmd Command the original commandmessage string the explanation message for invalidity of the commandReturns Event an event derivative from given Command
A static method to create EventStatus.error Event
cmd Command the original commandmessage string the explanation message for error during the command executionReturns Event an event derivative from given Command
A static method to create Event from stringified Event
s string a stringified EventReturns Event the event
A static method to stringify Event
e Event a genuine eventReturns string a stringified Event
FAQs
common class model for wool project
We found that wool-model demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.