
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@bbc/fcpx-xml-composer
Advanced tools
work in progress
Convert a json sequence into an FCPX XML.
Inspired by EDL Composer on npm it uses the same schema to describe the sequence.
Part of the bbc/digital-paper-edit project by BBC News Labs
cd, clone the repo, npm install
see example-usage.js for how to requrie and use the module.
To run the example do node example-usage.js
When importing the .fcpxml sequence in FCPX the media is going to be offline, to re-link the media go to Files -> Relink Files or see
see Re-link offline clips in FCPX, for more details.
npm install @bbc/fcpx-xml-composer
require or import in your code and see example usage for more details
A function that loop over the json sequence and using string interpolation creates an equivalent FCPX XML. With no dependencies.
Used the sequence form the docs - Listing 1-1 A library with a simple project as FCPXML as a starting point.
FCPX seems particularly picky about specifying the correct frame rate for the clips in the sequence.
Relinked files must have the same media type, same frame rate, and similar audio channels as the original files, and must be long enough to cover all the clips that reference the files.
A Known limitation is that the EDL composer sequence only supports one track, as the EDL format is not multi track. FCPX sequence could allow multiple tracks. But for the current use case with digital-paper-edit one track is sufficient. PRs might be considered to extend this module to multi track support.
6.1.0NA
TBC
TBC - published to npm under @bbc/fcpx-xml-composer
offset (in a way supported by FCPX XML) FAQs
Convert a json sequence into an FCPX XML.
The npm package @bbc/fcpx-xml-composer receives a total of 46 weekly downloads. As such, @bbc/fcpx-xml-composer popularity was classified as not popular.
We found that @bbc/fcpx-xml-composer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.