
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@apollo/gateway
Advanced tools
This package provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint.
Each microservice should implement the federation schema specification. This can be done either through Apollo Federation or a variety of other open source products.
For complete documentation, see the Apollo Gateway API reference.
import { ApolloServer } from "@apollo/server";
import { startStandaloneServer } from '@apollo/server/standalone';
import { ApolloGateway, IntrospectAndCompose } from "@apollo/gateway";
const gateway = new ApolloGateway({
supergraphSdl: new IntrospectAndCompose({
subgraphs: [
{ name: "accounts", url: "http://localhost:4001/graphql" }
// List of federation-capable GraphQL endpoints...
],
}),
});
const server = new ApolloServer({ gateway });
// Note the top-level await!
const { url } = await startStandaloneServer(server);
console.log(`🚀 Server ready at ${url}`);
graphql-tools is a package that provides a set of utilities to build and manipulate GraphQL schemas in JavaScript. It allows you to create a unified schema from multiple GraphQL services, similar to Apollo Gateway. However, it does not provide the same level of built-in support for federated services and managed federation as Apollo Gateway.
graphql-mesh is a package that allows you to create a unified GraphQL schema from multiple sources, including REST APIs, gRPC services, and other GraphQL APIs. It provides a flexible and extensible way to integrate different data sources into a single GraphQL API. Compared to Apollo Gateway, graphql-mesh offers more versatility in terms of the types of data sources it can integrate, but it may require more configuration and setup.
FAQs
Apollo Gateway
The npm package @apollo/gateway receives a total of 174,457 weekly downloads. As such, @apollo/gateway popularity was classified as popular.
We found that @apollo/gateway demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.