
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
hiveplotlib
Advanced tools
A plotting package for generating and visualizing static Hive Plots in Python.
hiveplotlib can be installed via pypi:
pip install hiveplotlib
To uninstall, run:
pip uninstall hiveplotlib
By default, hiveplotlib supports visualization only with the matplotlib backend, but
hiveplotlib also supports bokeh, holoviews,
and plotly visualizations, which can be installed via pip install hiveplotlib[bokeh],
pip install hiveplotlib[holoviews], and pip install hiveplotlib[plotly], respectively.
hiveplotlib also supports large network visualization via the datashader backend,
which can be installed as pip install hiveplotlib[datashader].
For more on how to use the software and examples, see the tutorials and gallery examples.
We recommend starting with our Introduction to Hive Plots and Quick Start Hive Plots pages.
All the example notebooks are available for download as jupyter notebooks in the repository under the
examples directory.
To install this environment and associated jupyter kernel used to run the notebooks, clone the repository and run:
cd <path/to/repository>
bash install.sh
The resulting hiveplotlib kernel can run any of those notebooks.
For more on Hive Plots, see our Introduction to Hive Plots.
For additional resources, see:
Krzywinski M, Birol I, Jones S, Marra M (2011). Hive Plots — Rational Approach to Visualizing Networks. Briefings in Bioinformatics (early access 9 December 2011, doi: 10.1093/bib/bbr069).
For more on contributing to the project, see CONTRIBUTING.md
We'd like to thank Rodrigo Garcia-Herrera for his work on
pyveplot, which we referenced
as a starting point for our structural design. We also translated some of his utility
methods for use in this repository.
FAQs
Visualize Network Data with Hive Plots
We found that hiveplotlib demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.