
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@dpc-sdp/nuxt-ripple
Advanced tools
A Nuxt module for integrating Ripple and Tide, this package loads
@dpc-sdp/ripple-ui-coreand@dpc-sdp/ripple-ui-forms.
To use this package in your Nuxt project first install it with npm
npm install @dpc-sdp/nuxt-ripple
Add the installed package in your sites nuxt.config.js file under the extends property, this includes the package as a Nuxt Layer.
export default defineNuxtConfig({
extends: [
'@dpc-sdp/nuxt-ripple'
]
})
Runtime variables can be set in your sites nuxt.config.js file under the tide property.
export default defineNuxtConfig({
runtimeConfig: {
public: {
API_URL: '',
tide: {
site: '8888',
baseUrl: 'https://develop.content.reference.sdp.vic.gov.au',
config: {
apiPrefix: '/api/v1',
auth: {
username: 'dpc',
password: 'sdp'
}
}
}
}
}
})
They can also be set as uppercase environment variables starting with NUXT_ and using _ to separate keys and case changes.
NUXT_PUBLIC_TIDE_SITE=8888
NUXT_PUBLIC_TIDE_BASE_URL=https://develop.content.reference.sdp.vic.gov.au
The robots.txt file is handled automatically by @dpc-sdp/nuxt-ripple, but can be overridden and extended via the nuxt.config if needed.
import { createResolver } from '@nuxt/kit'
const { resolve } = createResolver(import.meta.url)
export default defineNuxtConfig({
robots: {
configPath: resolve('./robots.config.ts')
}
})
import rules from '@dpc-sdp/nuxt-ripple/robots'
export default [
// optionally include, filter or map the default rules
...rules,
// add addtional rules
{ UserAgent: 'SomeCustomBot', Disallow: '/' }
]
FAQs
Nuxt module for integrating Ripple and Tide
The npm package @dpc-sdp/nuxt-ripple receives a total of 0 weekly downloads. As such, @dpc-sdp/nuxt-ripple popularity was classified as not popular.
We found that @dpc-sdp/nuxt-ripple demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.