
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@betagouv/les-communs-widget
Advanced tools
A React widget that displays associated services for ecological transition projects. This widget is designed to be embedded in various platforms to provide a consistent service discovery experience.
A React widget that displays associated services for ecological transition projects. This widget is designed to be embedded in various platforms to provide a consistent service discovery experience.
To use this widget in your project:
pnpm add @betagouv/les-communs-widget
Then import and use the component:
import { ServicesWidget } from "@betagouv/les-communs-widget";
function App() {
return <ServicesWidget projectId="0195af3a-6b26-7a5c-a091-712901a4498d" />;
}
By default the widget needs to consume the projectId from the Communs database. This ID is a uuid and you will get a 400 if you try any other format
Depending on the widget consumers, you might be able to use your own id as such. For now we only support tet
import { ServicesWidget } from "@betagouv/les-communs-widget";
function App() {
<ServicesWidget projectId="your-project-id-from-your-base" idType={"tetId"} />;
}
For platforms that don't have projects in the Communs database or don't have the concept of projects, you can use the context mode. This allows you to specify competences, leviers, and phases directly to get relevant services.
import { ServicesWidget } from "@betagouv/les-communs-widget";
function App() {
return (
<ServicesWidget
context={{
competences: ["90-11", "90-21"], // Police, sécurité, justice & Enseignement du premier degré
leviers: ["Gestion des forêts et produits bois", "Sobriété des bâtiments (résidentiel)"],
phases: ["Idée", "Étude"],
}}
/>
);
}
Available competences (from M57 referential):
90-11: Police, sécurité, justice90-21: Enseignement du premier degré90-31: Culture90-41: Santé90-51: Aménagement des territoires et habitat90-61: Action économique90-71: Environnement90-81: Transports scolairesAvailable leviers (ecological transition levers):
Gestion des forêts et produits boisChangements de pratiques de fertilisation azotéeElevage durableGestion des haiesSobriété des bâtiments (résidentiel)Electricité renouvelableAvailable phases:
IdéeÉtudeOpérationWhen testing the widget integration in can be useful to check how each service is displayed (since some iframe might have specific CSP rules against your domain)
In order to see all services regardless of their matching with the current project, you can pass prop debug as such:
import { ServicesWidget } from "@betagouv/les-communs-widget";
function App() {
return <ServicesWidget projectId="your-project-id" debug />;
}
You can test against the staging environment by passing prop isStagingEnv:
import { ServicesWidget } from "@betagouv/les-communs-widget";
function App() {
return <ServicesWidget projectId="your-project-id" isStagingEnv />;
}
If you encounter an error related to unknown file extensions in your test (e.g., .css), you may need to adjust your Vite configuration. Add the following to your vite.config.ts file.
The inlined package will be processed and bundled directly into the application rather than being treated as an external dependency. This is particularly useful for dependencies that include non-JavaScript assets (like CSS).
// ... existing code ...
export default defineConfig({
server: {
deps: {
inline: ['@betagouv/les-communs-widget'], // Ensure this dependency is processed correctly
},
},
// ... existing code ...
});
cd les-communs-widget
pnpm install
pnpm build
cd ../les-communs-widget-widget-sandbox
pnpm install
cd api
pnpm start:dev
cd les-communs-widget-widget-sandbox
pnpm dev
The sandbox will automatically reload when you make changes to the widget code.
pnpm dev:widget:publish
pnpm dev:widget-sandbox:link
pnpm dev:widget:push
pnpm dev:widget-sandbox:unlink
Increase the version number in your package json
Update the file CHANGELOG.md accordingly
Publish through script below (this will build the widget beforehand)
pnpm release
FAQs
A React widget that displays associated services for ecological transition projects. This widget is designed to be embedded in various platforms to provide a consistent service discovery experience.
We found that @betagouv/les-communs-widget demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.