
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
a web framework for fibjs
$ npm i @cub/cub --save
const Cub = require('@cub/cub');
const cub = new Cub();
cub.register(ctx => {
ctx.body = 'Hello World!';
});
cub.listen(8000);
Register function can be invoked many times to accept interceptor. All these registered interceptors will be executed one by one.
cub.register(ctx => {
ctx.body = 'Hello';
});
cub.register(ctx => {
ctx.body += ' World!';
});
If you want to stop running the flowing interceptor, just return false(only false accept) in the current interceptor.
cub.register(ctx => {
ctx.body = 'Hello ';
return false; // only `false` accept
});
cub.register(ctx => {
ctx.body += ' World!';
});
const BaseInterceptor = Cub.BaseInterceptor;
cub.register(new class extends BaseInterceptor {
before (ctx){
ctx.body = 'Hello';
}
after (ctx){
ctx.body += ' World!';
}
});
todo
Cub :
➜ ~ wrk -c100 -t10 -d5 --latency http://127.0.0.1:8000
Running 5s test @ http://127.0.0.1:8000
10 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 1.91ms 4.09ms 55.16ms 97.72%
Req/Sec 7.11k 1.09k 15.14k 93.07%
Latency Distribution
50% 1.38ms
75% 1.44ms
90% 1.53ms
99% 24.96ms
357495 requests in 5.10s, 41.93MB read
Requests/sec: 70060.74
Transfer/sec: 8.22MB
Koa@2 with Node.js 7.10.0:
➜ ~ wrk -c100 -t10 -d5 --latency http://127.0.0.1:8000
Running 5s test @ http://127.0.0.1:8000
10 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 6.51ms 1.09ms 20.98ms 91.32%
Req/Sec 1.54k 581.07 14.30k 99.80%
Latency Distribution
50% 6.40ms
75% 6.84ms
90% 7.33ms
99% 9.78ms
76959 requests in 5.10s, 10.94MB read
Requests/sec: 15093.17
Transfer/sec: 2.14MB
express@4 with Node.js 7.10.0:
➜ ~ wrk -c100 -t10 -d5 --latency http://127.0.0.1:8000
Running 5s test @ http://127.0.0.1:8000
10 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 9.13ms 769.26us 16.17ms 82.08%
Req/Sec 1.10k 61.17 1.21k 74.20%
Latency Distribution
50% 8.94ms
75% 9.38ms
90% 10.05ms
99% 11.95ms
54787 requests in 5.02s, 11.23MB read
Requests/sec: 10920.82
Transfer/sec: 2.24MB
Please open an issue here.
FAQs
a web framework for fibjs
We found that @cub/cub demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.