
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@agent-pattern-labs/iso-index
Advanced tools
Deterministic local artifact index for AI-agent workflows: build, query, and verify where authoritative facts live without model calls.
Deterministic local artifact index for AI-agent workflows.
iso-index answers: where is the authoritative fact? It crawls configured
local artifacts, extracts stable records, writes a compact JSON index, and lets
agents query that index instead of repeatedly grepping or loading growing files
into prompt context.
It is:
npm install @agent-pattern-labs/iso-index
iso-index build --config index.json --root . --out .iso-index.json
iso-index query "example labs" --index .iso-index.json
iso-index has --index .iso-index.json --key "company-role:example-labs:staff-agent-engineer"
iso-index verify --index .iso-index.json
iso-index explain --config index.json
iso-index build \
--config examples/jobforge-index.json \
--root examples/jobforge-project \
--out /tmp/jobforge.iso-index.json
iso-index query \
--index /tmp/jobforge.iso-index.json \
--key "company-role:example-labs:staff-agent-engineer"
iso-index has \
--index /tmp/jobforge.iso-index.json \
--kind jobforge.report.url \
--key "url:https://example.test/jobs/123"
Include and exclude globs are relative to --root; absolute, drive-prefixed,
and parent (..) patterns are rejected. The resolved search base is checked
again against the root, and directory symlinks are not followed. **/ matches
zero or more directories.
{
"version": 1,
"sources": [
{
"name": "reports",
"include": ["reports/*.md"],
"format": "text",
"rules": [
{
"kind": "report.url",
"pattern": "^\\*\\*URL:\\*\\*\\s*(?<url>https?://\\S+)",
"key": "url:{url}",
"value": "{source}",
"fields": { "url": "{url}", "report": "{source}" },
"tags": ["report", "url"]
}
]
}
]
}
Supported source formats:
text: line-by-line regex rules with named capture groups.tsv: delimited rows with headers or explicit columns.markdown-table: markdown table rows keyed by header names.jsonl: one JSON object per line, flattened with dot paths.Template placeholders support fields plus {source} and {line}. Filters:
{Company|slug} → example-labs{Status|lower} → applied{Role|trim} → trims whitespace{field|json} → JSON stringifies the valueimport {
buildIndex,
hasIndexRecord,
loadIndexConfig,
queryIndex,
verifyIndex,
} from "@agent-pattern-labs/iso-index";
const config = loadIndexConfig(JSON.parse(configText));
const index = buildIndex(config, { root: process.cwd() });
const matches = queryIndex(index, { text: "example labs" });
const alreadyApplied = hasIndexRecord(index, {
key: "company-role:example-labs:staff-agent-engineer",
});
const verify = verifyIndex(index);
iso-index does not decide which source is authoritative for your domain. It
only builds and verifies a compact lookup layer from the sources you configure.
Domain packages still own freshness rules, source precedence, and workflow
decisions.
FAQs
Deterministic local artifact index for AI-agent workflows: build, query, and verify where authoritative facts live without model calls.
We found that @agent-pattern-labs/iso-index demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.