
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
Dynamicweb
Advanced tools
This package is the main Dynamicweb package and is one of several packages that is required for a full Dynamicweb installation.
This is the package that contains the APIs for content - websites, pages, grids, paragraphs, items and more.
It is recommended to install a full solution by using our .NET project templates
Install Dynamicweb project templates
Install the latest .NET SDK
Open PowerShell or a terminal and install the latest version of the templates package:
$ dotnet new install Dynamicweb.ProjectTemplates
After this project templates have been installed, create a new project called 'myDynamicwebProject':
$ dotnet new dw10-suite -n myDynamicwebProject
Run the project
$ cd myDynamicwebProject
$ dotnet run
This package contains a number of APIs for managing the content. The main entrance is the services found in Dynamicweb.Content.Services namespace.
var page = Dynamicweb.Content.Services.Pages.GetPage(1);
var pageName = page.MenuText;
page.MetaTitle = $"Welcome to {pageName}";
Dynamicweb.Content.Services.Pages.SavePage(page);
Dynamicweb is a Unified Commerce Suite with standard integration to Microsoft Dynamics ERP
DynamicWeb 10 is PIM, eCommerce, CMS, and Marketing in one powerful and flexible Commerce Suite built from the ground up on the latest .NET technology with a composable MACH (Microservices, API-first, Cloud, Headless) based architecture.
With DynamicWeb 10 you can create omnichannel B2B, B2C or D2C commerce experiences that will increase conversions and simplify back-office tasks across all your brands and stores - all from one single platform.
The open integration framework gives you an advanced starting point that includes standard templates for integrating eCommerce with ERP systems like MS Dynamics (Business Central, Finance & Operations, NAV, and AX).
To learn all about the requirements, installation, setup, configuration and implementation of Dynamicweb solutions, please refer to our documentation portal.
Got any feedback or questions? Please head over to our community forum
FAQs
Dynamicweb main API
We found that dynamicweb demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.