
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
certlin
Advanced tools
SageMath package for linear inequality systems and certifying (un)solvability
Distributed under the terms of the GNU General Public License (GPL, see the LICENSE file), either version 3 or (at your option) any later version
Sage 10.0 or later is recommended.
To install the latest development version on a system where Sage was built from source or installed from official packages, run:
sage -pip install git+https://github.com/MarcusAichmayr/certlin.git
To install the package for Python directly, run:
pip install certlin
Download the source from the git repository:
git clone https://github.com/MarcusAichmayr/certlin.git
Change to the root directory of the repository and run:
make install
Download the source from the git repository:
git clone https://github.com/MarcusAichmayr/certlin.git
Change to the root directory of the repository and run:
python3 -m venv venv
. venv/bin/activate
pip install -v -e ".[passagemath]"
The documentation of this package is available on GitHub:
https://marcusaichmayr.github.io/certlin/index.html
To generate it, run
make doc
or
make doc-pdf
at the root directory of the repository.
To run the test suite, install the package and run the command
make test
at the root directory of the repository.
FAQs
SageMath package for linear inequality systems and certifying (un)solvability
We found that certlin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.