
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
Exceptionless.WebApi
Advanced tools
Exceptionless client for ASP.NET Web API applications. Exceptionless is a cloud based error reporting service that sends your exceptions to https://exceptionless.com and provides aggregated views and analytics.
Exceptionless Readme
Exceptionless provides real-time error reporting for your apps. It organizes the gathered information into simple actionable data that will help your app become exceptionless!
Learn more at http://exceptionless.io.
How to get an api key
The Exceptionless client requires an api key to use the Exceptionless service. You can get your Exceptionless api key by logging into http://exceptionless.io and viewing your project configuration page.
By default the Exceptionless Client will report all available metadata including potential PII data. You can fine tune the collection of information via Data Exclusions or turning off collection completely.
Please visit the documentation https://exceptionless.com/docs/clients/dotnet/private-information/ for detailed information on how to configure the client to meet your requirements.
ASP.NET Web Api Integration
The Exceptionless.WebApi package will automatically configure your web.config. All you need to do is open the web.config and add your Exceptionless api key to the web.config Exceptionless section.
Next, you must import the "Exceptionless" namespace and call the following line of code to start reporting unhandled exceptions. You will need to run code during application startup and pass it an HttpConfiguration instance. Please note that this code is normally placed inside of the WebApiConfig classes Register method.
Exceptionless.ExceptionlessClient.Default.RegisterWebApi(config)
If you are hosting Web API inside of ASP.NET, you would register Exceptionless like:
Exceptionless.ExceptionlessClient.Default.RegisterWebApi(GlobalConfiguration.Configuration)
Please visit the documentation https://exceptionless.com/docs/clients/dotnet/sending-events/ for examples on sending events to Exceptionless.
By default the Exceptionless Client will report all unhandled exceptions. You can also manually send an exception by importing the Exceptionless namespace and calling the following method.
exception.ToExceptionless().Submit()
Please note that Web Api doesn't have a static http context. If possible, it is recommended that you set the HttpActionContext when submitting events. Doing so will allow the request and user information to be populated. You can do this by calling the SetHttpActionContext EventBuilder extension method.
exception.ToExceptionless().SetHttpActionContext(ActionContext).Submit()
Documentation and Support
Please visit http://exceptionless.io for documentation and support.
FAQs
Exceptionless client for ASP.NET Web API applications. Exceptionless is a cloud based error reporting service that sends your exceptions to https://exceptionless.com and provides aggregated views and analytics.
We found that exceptionless.webapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.