
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
console-browserify
Advanced tools

Emulate console for all the browsers
You usually do not have to install console-browserify yourself! If your code runs in Node.js, console is built in. If your code runs in the browser, bundlers like browserify or webpack also include the console-browserify module when you do require('console').
But if none of those apply, with npm do:
npm install console-browserify
var console = require("console")
// Or when manually using console-browserify directly:
// var console = require("console-browserify")
console.log("hello world!")
See the Node.js Console docs. console-browserify does not support creating new Console instances and does not support the Inspector-only methods.
PRs are very welcome! The main way to contribute to console-browserify is by porting features, bugfixes and tests from Node.js. Ideally, code contributions to this module are copy-pasted from Node.js and transpiled to ES5, rather than reimplemented from scratch. Matching the Node.js code as closely as possible makes maintenance simpler when new changes land in Node.js.
This module intends to provide exactly the same API as Node.js, so features that are not available in the core console module will not be accepted. Feature requests should instead be directed at nodejs/node and will be added to this module once they are implemented in Node.js.
If there is a difference in behaviour between Node.js's console module and this module, please open an issue!
A tiny JavaScript debugging utility modelled after Node.js core's debugging technique. It's similar to console-browserify but offers more control over enabling/disabling log levels and is styled differently.
A minimal lightweight logging for JavaScript, similar to console-browserify, but includes configurable log level methods to control the logging output.
FAQs
Emulate console for all the browsers
The npm package console-browserify receives a total of 8,098,290 weekly downloads. As such, console-browserify popularity was classified as popular.
We found that console-browserify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 41 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.