
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@bothrs/create-project
Advanced tools
_____ _ _ _
/ __ \ | | | \ | |
| / \/_ __ ___ __ _| |_ ___ | \| | _____ __
| | | '__/ _ \/ _` | __/ _ \ | . ` |/ _ \ \ /\ / /
| \__/\ | | __/ (_| | || __/ | |\ | __/\ V V /
\____/_| \___|\__,_|\__\___| \_| \_/\___| \_/\_/
______ _ _ ______ _ _
| ___ \ | | | | | ___ \ (_) | |
| |_/ / ___ | |_| |__ _ __ ___ | |_/ / __ ___ _ ___ ___| |_
| ___ \/ _ \| __| '_ \| '__/ __| | __/ '__/ _ \| |/ _ \/ __| __|
| |_/ / (_) | |_| | | | | \__ \ | | | | | (_) | | __/ (__| |_
\____/ \___/ \__|_| |_|_| |___/ \_| |_| \___/| |\___|\___|\__|
_/ |
|__/
Run npx @bothrs/create-project to start setting up a new project!
When contributing, run the project locally by using node index.js
This tool will take you through an automatic process to create a new Bothrs project When you run it, you will be asked a couple of questions about what project you want to install, as well as some info needed to configure everything correctly.
this will look something like:
? What is the name of your project? new-bothrs-project
? Select type of project Healthblocks
Cloning and installing Healthblocks now
Cloning into 'new-bothrs-project'...
We'll need some basic app info now
? app name: new-bothrs-app
? app description: a new bothrs app!
? app version: 1.0.0
? app slug: bothrs-app
? app scheme: bothrs-app
? android package id: com.bothrs.package
? android version code: 1
? iOS bundle identifier: com.bothrs.package
? ios build number: 1.0.0
and like:
? Do you want to set up sentry? Yes
We'll need the following data for the sentry config:
? organization: bothrs
? project: new-bothrs-project
? authToken:
The tool is built on the inquirer project, and its true value lies in the fact that we can expand it and build the default setups and ways of working here, so we dont have to start by copying a different project and updating everything in it.
To continue work on the tool, we need a couple of things
[] Github Action to automatically publish to npm [] Adding expo and next templates [] Adding default deploy to a new project [] Saving the answers in a bothrs config in the package file [] Using the bothrs config to rerun the tool and continue where you left off [] TS & TDD?
FAQs
creating a new bothrs project
We found that @bothrs/create-project demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.