
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@ovotech/avro-timestamp-millis
Advanced tools
A Logical type for representing a date stored as the number of milliseconds since epoch
yarn add @ovotech/avro-timestamp-millis
And then you can use AvroEpochDays for a logicalType of a field.
import { Type, Schema } from 'avsc';
import { AvroTimestampMillis } from '@ovotech/avro-timestamp-millis';
const eventSchema: Schema = {
type: 'record',
name: 'Event',
fields: [
{
name: 'field1',
type: { type: 'long', logicalType: 'timestamp-millis' },
},
],
};
const EventType = Type.forSchema(eventSchema, {
logicalTypes: { 'timestamp-millis': AvroTimestampMillis },
});
const encoded = EventType.toBuffer({ field1: new Date('2020-01-01') });
const decoded = EventType.fromBuffer(encoded);
console.log(decoded);
It also supports schema evolution from int, logical:date and string types
import { Type, Schema } from 'avsc';
import { AvroTimestampMillis } from '@ovotech/avro-timestamp-millis';
const previousSchema: Schema = {
type: 'record',
name: 'Event',
fields: [
{
name: 'field1',
type: { type: 'string' },
},
],
};
const eventSchema: Schema = {
type: 'record',
name: 'Event',
fields: [
{
name: 'field1',
type: { type: 'long', logicalType: 'timestamp-millis' },
},
],
};
const PreviousType = Type.forSchema(previousSchema);
const EventType = Type.forSchema(eventSchema, {
logicalTypes: { 'timestamp-millis': AvroTimestampMillis },
});
const previousTypeResolver = EventType.createResolver(PreviousType);
const encoded = PreviousType.toBuffer({ field1: '2020-01-01' });
const decoded = EventType.fromBuffer(encoded, previousTypeResolver);
console.log(decoded);
Then you can run the tests with:
yarn test
Style is maintained with prettier and tslint
yarn lint
Deployment is preferment by lerna automatically on merge / push to main, but you'll need to bump the package version numbers yourself. Only updated packages with newer versions will be pushed to the npm registry.
Have a bug? File an issue with a simple example that reproduces this so we can take a look & confirm.
Want to make a change? Submit a PR, explain why it's useful, and make sure you've updated the docs (this file) and the tests (see test folder).
This project is licensed under Apache 2 - see the LICENSE file for details
FAQs
A logical type representing Date as long number
The npm package @ovotech/avro-timestamp-millis receives a total of 3,762 weekly downloads. As such, @ovotech/avro-timestamp-millis popularity was classified as popular.
We found that @ovotech/avro-timestamp-millis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 250 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.