
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
openECCI
Advanced tools
An open source python package for guiding Electron Channelling Contrast Imaging (ECCI)in Scanning Electron Microscopes (SEM).
| Deployment | |
|---|---|
| Activity | Work in progress |
| Citation | |
| License |
Refer to the included Jupyter notebook tutorials for detailed instruction and applications. Demo datasets can be downloaded from openECCI-data repository. The openECCI documentation page is currently under development. Stay tuned for more information. More code examples, and a detailed workflow tutorial paper will be updated soon.
Create a new conda environment
conda update conda
conda create -n openecci python=3.10
conda activate openecci
Install openECCI with pip:
pip install openECCI
or you can install from source:
git clone https://github.com/IMBalENce/openECCI
cd openECCI
pip install .
If you want to create an editable install:
pip install -e .
If you are using openECCI in your scientific research, please help our scientific visibility by citing the Zenodo DOI: https://doi.org/10.5281/zenodo.11183730.
| Zhou Xu | Monash Centre for Electron Microscopy (MCEM) |
| HÃ¥kon Wiik Ã…nes | Norwegian University of Science and Technology Xnovo Technology Aps |
| Sergey Gorelick | Monash Centre for Electron Microscopy (MCEM) Ramaciotti Centre for Cryo-Electron Microscopy |
| Xiya Fang | Monash Centre for Electron Microscopy (MCEM) |
| Peter Miller | Monash Centre for Electron Microscopy (MCEM) |
FAQs
An open source python package for guiding Electron Channelling Contrast Imaging (ECCI)in Scanning Electron Microscopes (SEM).
We found that openECCI demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.