
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@corva/eslint-plugin-test-selectors
Advanced tools
Makes sure test DOM attributes (e.g. data-test-id) are added to interactive DOM elements.
Enforces that a data-test-id (case-sensitive) attribute is present on interactive DOM elements to help with UI testing.
<button>Download</button><button data-test-id="download-button">Download</button>You'll first need to install ESLint, which requires Node.js (note that eslint-plugin-test-selectors requires Node.js 10+):
$ yarn add eslint --dev
Next, install @corva/eslint-plugin-test-selectors:
$ yarn add @corva/eslint-plugin-test-selectors --dev
Add @corva/test-selectors to the plugins section of your .eslintrc configuration file:
{
"plugins": ["@corva/test-selectors"]
}
If you want to use all the recommended default rules, you can simply add this line to the extends section of your .eslintrc configuration:
{
"extends": ["plugin:@corva/test-selectors/recommended"]
}
By default, this will run all Supported Rules and emit eslint warnings. If you want to be more strict, you can emit eslint errors by instead using plugin:@corva/test-selectors/recommendedWithErrors.
Another option: you can also selectively enable and disable individual rules in the rules section of your .eslintrc configuration. For instance, if you only want to enable the @corva/test-selectors/button rule, skip the extends addition above and simply add the following to the rules section of your .eslintrc configuration:
{
"rules": {
"@corva/test-selectors/button": ["warn", "always"]
}
}
If you like most of the recommended rules by adding the extends option above, but find one in particular to be bothersome, you can simply disable it:
{
"rules": {
"@corva/test-selectors/anchor": "off"
}
}
Note: see Supported Rules below for a full list.
All tests can be customized individually by passing an object with one or more of the following properties.
The default test attribute expected is data-test-id, but you can override it with whatever you like. Here is how you would use data-some-custom-attribute instead:
{
"rules": {
"@corva/test-selectors/onChange": [
"warn",
"always",
{ "testAttribute": "data-some-custom-attribute" }
]
}
}
Note: You can also pass multiple attributes
{
"rules": {
"@corva/test-selectors/onChange": [
"warn",
"always",
{ "testAttribute": ["data-testid", "testId"] }
]
}
}
By default all elements with the disabled attribute are ignored, e.g. <input disabled />. If you don't want to ignore this attribute, set ignoreDisabled to false:
{
"rules": {
"@corva/test-selectors/onChange": ["warn", "always", { "ignoreDisabled": false }]
}
}
By default all elements with the readonly attribute are ignored, e.g. <input readonly />. If you don't want to ignore this attribute, set ignoreReadonly to false:
{
"rules": {
"@corva/test-selectors/onChange": ["warn", "always", { "ignoreReadonly": false }]
}
}
Only supported on button rule, this option will exempt React components called Button from the rule.
{
"rules": {
"@corva/test-selectors/button": ["warn", "always", { "htmlOnly": true }]
}
}
@corva/test-selectors/anchor@corva/test-selectors/button@corva/test-selectors/input@corva/test-selectors/onChange@corva/test-selectors/onClick@corva/test-selectors/onKeyDown@corva/test-selectors/onKeyUp@corva/test-selectors/onSubmitFAQs
Makes sure test DOM attributes (e.g. data-test-id) are added to interactive DOM elements.
The npm package @corva/eslint-plugin-test-selectors receives a total of 741 weekly downloads. As such, @corva/eslint-plugin-test-selectors popularity was classified as not popular.
We found that @corva/eslint-plugin-test-selectors demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.