
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@mft/mhe-sdk
Advanced tools
This module provides easy access to the MoneyHub Enterprise API.
Here are the main processes that this repository is responsible for:
#!javascript
import MoneyHub from '@mft/mhe-sdk';
MoneyHub.setup({
environment: 'test',
clientId: ''
clientSecret: '',
scopes: ''
});
const refreshToken = 'Refresh token goes here';
MoneyHub.user(refreshToken).accounts().create({
...
}).then((account) => console.log);
Important: This project requires Node v6 to run. I recommend using nvm to install alternate versions of Node.
npm install (using Node v6)npm run start (to transpile the project into build/ and begin execution)The project is written using Typescript and ES6 (ES2015) features only.
The build system is integrated with both TSLint and ESLint, thanks to the tslint.json and .eslintrc.json files provided. When the service is started or reloads, all the code is run through both linters and you will see their output.
We intend to code in the AirBnB Javascript Style, and ESLint is configured to use their rules, with a few modifications to suit the context of Typescript code.
For maximum benefit, this project aims to embrace as much of Typescript as possible. Therefore, TSLint will insist upon giving all variables type definitions.
When installing new NPM modules, check if they have an @types declaration. This package/file is
provided by the community to give standard Javascript modules types from Typescript, allowing for
interoperability.
If you import a module which does not have one, you will have to create your own for Typescript to
detect the module. Examples of these can be found in "src/types".
You can create a simple stub declaration:
declare module 'module-name' {
}
You might end up declaring significant portions of the module's API, but this will ensure more consistent code in the future.
More information about importing type definitions can be found here.
FAQs
An SDK for interacting with MoneyHub Enterprise APIs.
The npm package @mft/mhe-sdk receives a total of 2 weekly downloads. As such, @mft/mhe-sdk popularity was classified as not popular.
We found that @mft/mhe-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.