
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
concatrim
Advanced tools
Concatrim is a python program to trim-and-concatenate media files. It depends on ffmpeg.
Concatrim is distributed as source code on this repository and PyPI under MIT license.
See requirements.txt.
Install using pip
pip install concatrim
Clone this repository and run setup.py to install
python setup.py install
At the moment;
To trim a media file, use Concatrimmer class from concatrim package.
Initiate an instance with the input file name and optionally configuration for padding. When you trim more than two parts of the input media, a silence padding (configured in milliseconds) will be inserted between each slice.
from concatrim import Concatrimmer
c = Concatrimmer('input-file.mp3', 1000) # will insert 1-second silences between slices
From here, you can set which part of the input we want to trim, using add_spans method.
c.add_spans([1000, 4000], [12000, 22000])
# configures the program to extract two parts, 1-4 second and 12-22 second.
When you're done adding spans, call concatrim method, with a directory name you want to use to store trimmed output file.
c.concatrim('../outputs')
Additionally, we can pass prefix, suffix arguments to rename the output file (suffix will be added at before the extension name).
c.concatrim('../outputs', suffix='.trimmmed')
Once you have all spans for trimming configured in a Concatrimmer object, you can also ask for conversion between two time points; one from the original media file, and the other from the trimmed one. This conversion will consider the padding pauses that'd be inserted between spans. Again, all input and output of the conversion is in milliseconds.
c.conv_to_trimmed(2100) # will return 1100
c.conv_to_original(1100) # will return 2100
c.conv_to_original(11100) # will return None because 11100 ms is trimmed out
c.conv_to_original(12100) # will return 4100
FAQs
Python program to trim-then-concatenate A/V media files using ffmpeg
We found that concatrim demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.