
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@jsvfs/core
Advanced tools
The JavaScript Virtual File System - an extensible engine for file operations.
The core module for JS Virtual File System. Provides the main VirtualFileSystem class with just enough back-end to get started with in-memory file hierarchy.
Get it from npm:
npm install --save @jsvfs/core
Without an adapter which implements a persistent storage, the JS Virtual File System will simply be a non-persistent store. These are the officially supported adapters.
@jsvfs/adapter-minio-s3@jsvfs/adapter-azure-blob@jsvfs/adapter-multifs module @jsvfs/adapter-node-fs@jsvfs/adapter-noop; this is included as the default adapter.Other adapters can be found using the keyword "jsvfs adapter".
Adapters should be constructed first and passed to the VirtualFileSystem class when constructing it. Make sure to read the documentation closely for a given adapter so that it has the appropriate options for accessing and manipulating the persistent storage it implements.
import { NodeFSAdapter } from '@jsvfs/adapter-node-fs'
import { VirtualFileSystem } from '@jsvfs/core'
const adapter = new NodeFSAdapter({ cwd: '/my/path/' })
const vfs = new VirtualFileSystem(adapter)
Work on complete documentation for writing adapters is coming. For now, start with the code for @jsvfs/types and read through the interface provided for adapters. Consider the Node fs adapter to be the reference implementation and take a look at how it implements the interface.
If the adapter implements a storage which is widely used, consider forking the jsvfs repository and contributing the adapter as a module. Assuming that this is the route you take, familiarity with TypeScript and Lerna are a must.
Otherwise, you can simply release your module on NPM or another package repository. If you'd like it to be discoverable relative to jsvfs, please use the keyword "jsvfs adapter" in your package.json.
Complete documentation of jsvfs can be found at the jsvfs site.
FAQs
The JavaScript Virtual File System - an extensible engine for file operations.
We found that @jsvfs/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.