
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
jquery-touchswipe
Advanced tools
A jQuery plugin to be used on touch devices such as iPad, iPhone, Android etc. Detects single and multiple finger swipes, pinches and falls back to mouse 'drags' on the desktop. Time and distance thresholds can be set to distinguish between swipe gesture and slow drag. Allows exclusion of child elements (interactive elements) as well allowing page scrolling or page zooming depending on configuration. - Detects swipes in 4 directions, "up", "down", "left" and "right" - Detects pinches "in" and "out" - Supports single finger or double finger touch events - Supports click events both on the touchSwipe object and its child objects - Definable threshold / maxTimeThreshold to determin when a gesture is actually a swipe - Events triggered for swipe "start","move","end" and "cancel" - End event can be triggered either on touch release, or as soon as threshold is met - Allows swiping and page scrolling - Disables user input elements (Button, form, text etc) from triggering swipes
FAQs
A jQuery plugin to be used on touch devices such as iPad, iPhone, Android etc. Detects single and multiple finger swipes, pinches and falls back to mouse 'drags' on the desktop. Time and distance thresholds can be set to distinguish between swipe gesture and slow drag. Allows exclusion of child elements (interactive elements) as well allowing page scrolling or page zooming depending on configuration. - Detects swipes in 4 directions, "up", "down", "left" and "right" - Detects pinches "in" and "out" - Supports single finger or double finger touch events - Supports click events both on the touchSwipe object and its child objects - Definable threshold / maxTimeThreshold to determin when a gesture is actually a swipe - Events triggered for swipe "start","move","end" and "cancel" - End event can be triggered either on touch release, or as soon as threshold is met - Allows swiping and page scrolling - Disables user input elements (Button, form, text etc) from triggering swipes
We found that jquery-touchswipe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.