
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@hellomouse/session-pouchdb-store
Advanced tools
PouchDB express session store. Can do realtime session data synchronization via PouchDB server
A PouchDB session store for express.js.
npm install session-pouchdb-store --save
This will install session-pouchdb-store and add it to your application's package.json file.
If you use a remote PouchDB server, make sure the database exists prior to start your application/s
Use with your express session middleware, like this:
const
express = require("express"),
session = require("express-session"),
PouchSession = require("session-pouchdb-store");
let app = express();
app.use(session({
secret: 'thisismysecret',
resave: false,
saveUninitialized: true,
store : new PouchSession()
}));
app.listen(3000, () => {
console.log(`Server ${process.pid} started on port 3000`);
});
By default, PouchSession creates an in-memory database for testing purposes. You can pass your own instance or connect to a remote PouchDB/CouchDB server:
app.use(session({
secret: 'thisismysecret',
resave: false,
saveUninitialized: true,
store : new PouchSession('http://pouchdbserver:port/sessions')
}));
const PouchDB = require('pouchdb');
let db = new PouchDB("sessions",{adapter:'leveldb'});
app.use(session({
secret: 'thisismysecret',
resave: false,
saveUninitialized: true,
store : new PouchSession(db)
}));
In order to synchronize session data, the current version of the store requires a remote PouchDB server, so multiple express processes can connect to the same database and perform synchronization.
Creates a new store instance. The first argument can be one of the following:
Options is an object that allows overriding some store behaviours:
Default options are as follows:
Here is a list of all available options:
var options = {
// Max idle time in ms
maxIdle : 5*60*1000,
// Scavenge period in ms
scavenge : 1000,
// Database purge period in ms
purge : 5*60*1000
};
FAQs
PouchDB express session store. Can do realtime session data synchronization via PouchDB server
We found that @hellomouse/session-pouchdb-store demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.