
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@picgo/store
Advanced tools
For PicGo projects to write & read data or configuration in disk.
import { DBStore } from '@picgo/store'
const db = new DBStore('path/to/your/xxx.db', 'collectionName')
const main = async () => {
const result = await db.insert({
imgUrl: 'xxxx.jpg',
})
console.log(result)
// {
// id: 'xxxxx',
// imgUrl: 'xxx.jpg',
// createdAt: 123123123123,
// updatedAt: 123123123123
// }
}
For now, @picgo/store has two export member: DBStore & JSONStore.
new DBStore(dbPath: string, collectionName: string)const db = new DBStore('picgo.db', 'uploadImgs')
.get(filter?: IFilter)Promise<IGetResult<IObject>[]>To get the whole collection value.
async () => {
const collection = await db.get()
console.log(collection) // { total: x, data: [{...}, {...}, ...] }
}
To get filtered collection: (just like SQL orderBy, limit & offset)
async () => {
const collection = await db.get({
orderBy: 'desc', // ['desc' | 'asc'] -> order with created-time
limit: 1, // limit >= 1
offset: 0, // offset >= 0
})
console.log(collection) // { total: 1, data: [{...}] }
}
.insert<T>(value: T)Promise<IResult<T>>To insert an item to collection.
async () => {
const result = await db.insert({
imgUrl: 'https://xxxx.jpg'
})
console.log(result)
// {
// id: string,
// imgUrl: string,
// createdAt: number,
// updatedAt: number
// }
}
.insertMany<T>(value: T[])Promise<IResult<T>[]>To insert multiple items to collection at once .
async () => {
const result = await db.insertMany([
{
imgUrl: 'https://xxxx.jpg'
},
{
imgUrl: 'https://yyyy.jpg'
}
])
console.log(result)
// [{
// id: string,
// imgUrl: string,
// createdAt: number,
// updatedAt: number
// },{
// id: string,
// imgUrl: string,
// createdAt: number,
// updatedAt: number
// }]
}
.updateById(id: string, value: IObject)Promise<boolean>To update an item by id. It will return false if the id does not exist.
async () => {
const result = await db.updateById('test-id', {
test: 123
})
console.log(result) // true
}
.getById(id: string)Promise<IObject | undefined>To get an item by id.
async () => {
const result = await db.getById('xxx')
console.log(result) // undefined
}
.removeById(id: string);Promise<void>To remove an item by id.
async () => {
const result = await db.removeById('xxx')
console.log(result) // undefined
}
.overwrite<T>(value: T[]) (v2.0.0)Promise<IResult<T>[]>To overwrite whole collection:
async () => {
const result = await db.overwrite([
{
imgUrl: 'https://xxxx.jpg'
},
{
imgUrl: 'https://yyyy.jpg'
}
])
console.log(result)
// [{
// id: string,
// imgUrl: string,
// createdAt: number,
// updatedAt: number
// },{
// id: string,
// imgUrl: string,
// createdAt: number,
// updatedAt: number
// }]
}
.updateMany(list: IObject[]) (v2.1.0)Promise<{ total: number, success: number }>To update many items by id:
async () => {
const result = await db.updateMany([
{
id: 'xxx', // need to have id
imgUrl: 'https://xxxx.jpg'
},
{
id: 'yyy',
imgUrl: 'https://yyyy.jpg'
},
{
imgUrl: 'https://zzzz.jpg'
}
])
console.log(result)
// { total: 3, success: 2 }
}
Copyright (c) 2020 Molunerfinn
FAQs
For PicGo projects to write & read data or configuration in disk.
The npm package @picgo/store receives a total of 521 weekly downloads. As such, @picgo/store popularity was classified as not popular.
We found that @picgo/store demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.