
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
format-binary-tree
Advanced tools
Binary trees can be stored as a linked list, but they can also be represented as an array (for example, when working with binary heaps).
I didn't see a library that formats binary trees implemented as an array, so I decided to create this very simple library.
npm install format-binary-tree
yarn add format-binary-tree
import formatBinaryTree from 'format-binary-tree';
formatBinaryTree({ values: [1, 2, 3, 4, 5, 6, 7, 8, 9] });
// • 1
// • 3
// • 7
// • 6
// • 2
// • 5
// • 4
// • 9
// • 8
formatBinaryTree({ values, nodeSymbol, indentationSize })
values is the array of values that represent the binary treenodeSymbol is the string that prefixes each node - defaults to •indentationSize is a number that represents the number of spaces to indent each level - defaults to 2formatBinaryTree traverses the tree by going root, right, left. I know this isn't a "standard" traversal, but I found it easier to visualize the tree this way.
FAQs
Array-based binary trees to string
We found that format-binary-tree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.