
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@salla.sa/base
Advanced tools
Kick off your Salla JS project with this core package. It includes the main elements needed for building a JS project. On top of that, it's based on the Event-Driven Architecture.
Explore our blogs »
Report Bug ·
Request Feature .
</Salla Developers> .
Official Documentation
Salla Core JS package is based on the Event-Driven Architecture, which is a modern design approach centered on data that represents "events" (i.e., a product has been added to the cart). In event-driven programming, an event is the result of a single or multiple actions. Subscribers can listen to that event and take action after it is released by the emitter.
Salla Core JS uses EventEmitter2, which is an implementation of the EventEmitter module found in Node.js. It not only outperforms EventEmitter in benchmarks and is browser-compatible, but it also adds a slew of new non-breaking functionality to the EventEmitter interface.
Salla Core JS can be installed from the npm using the following commands:
npm install @salla.sa/base --save
yarn add @salla.sa/base
A quick look at the top-level files in the Salla Core JS project:
.
├── src / helpers
├── src / config.d.ts
├── src / cookie.ts
├── src / event.js
├── src / index.ts
├── src / logger.ts
└── src / storage.js
import Salla from "@salla.sa/base"
Upon the installation, the following will be available to the developer:
When the JS Core project is first loaded, the initialization procedure is used to obtain the necessary configuration settings. The developer has the ability to configure the project to meet his needs.
The JS Core project is packaged with a variety of helpful functions that may be accessed and used directly within projects.
Developers can use local storage to save and retrieve data in the browser. The data in local storage does not have an expiration date. This means that even if the tab or browser window is closed, the data will remain. Furthermore, the data is only saved locally.
The JS Core project makes it easy to create, retrieve, and modify cookies. Name, value, and length can be limited.
The JS Core project includes a logger tool that helps in tracking the execution flow and determining why certain things occur in the JS application.
The Events can be triggered by the emitter's 'emit()' method. This method causes the event to be pushed using the data that the developer has provided.
For example, the developer may create an event based on verified login by the user. Simply, the emit() method can be called with a list of parameters. These parameters state the event's action and the passed data along with it as below:
// via event name
Salla.event.emit("auth::verified", {success: true}, 'email')
After creating the event along with its list of data, the next step is to implement an appropriate listener for that event. In Salla JS Events, this can be achieved using two methods:
// via event name
Salla.event.on('auth::verified',(response, authType) => {
// lets do anything when the event emit
console.log('The customer has been verifed');
console.log(response, authType)
});
one time listener for the event along with an anonymized function to perform the needed action based on the event result.// Adds a one time listener for the event.
Salla.event.once('auth::verified',(response, authType) => {
// The listener is invoked only the first time
// the event is fired, after which it is removed.
console.log('The customer has been verifed');
console.log(response, authType)
})
The FormDataWrapper provides a unified interface for working with both regular objects and FormData, making it easier to handle file uploads and form data in a consistent way.
const formData = new FormData();
const wrapped = createWrapper(formData);
// Adding a single file
const file1 = new File(['Hello World'], 'hello.txt', { type: 'text/plain' });
wrapped.document = file1; // Works via proxy
// OR
wrapped.setFile('document', file1); // Explicit file method
// Getting the file back
const retrievedFile = wrapped.document; // Returns File object
console.log(retrievedFile.name); // 'hello.txt'
console.log(retrievedFile.size); // 11 (bytes)
const file2 = new File(['Second file'], 'second.txt', { type: 'text/plain' });
const file3 = new File(['Third file'], 'third.txt', { type: 'text/plain' });
// Setting multiple files at once (replaces existing)
wrapped.attachments = [file2, file3];
// Or append files one by one
wrapped.append('photos', new File(['Photo 1'], 'photo1.jpg', { type: 'image/jpeg' }));
wrapped.append('photos', new File(['Photo 2'], 'photo2.jpg', { type: 'image/jpeg' }));
// Get all files for a key
const allPhotos = wrapped.getFiles('photos');
console.log(allPhotos.length); // 2
console.log(allPhotos.map(f => f.name)); // ['photo1.jpg', 'photo2.jpg']
wrapped.username = 'john_doe';
wrapped.age = 30;
wrapped.avatar = new File(['avatar data'], 'avatar.png', { type: 'image/png' });
// Check if property is a file
console.log(wrapped.isFile('avatar')); // true
console.log(wrapped.isFile('username')); // false
// Get file info without reading content
const fileInfo = wrapped.getFileInfo('avatar');
console.log(fileInfo); // [{ name: 'avatar.png', size: 11, type: 'image/png' }]
function processUserData(data: Record<string, any> | FormData) {
const wrapped = createWrapper(data);
// These operations work for both types
wrapped.name = 'Jane Doe';
wrapped.email = 'jane@example.com';
// Handle file upload (works differently based on type)
const profilePic = new File(['pic'], 'profile.jpg', { type: 'image/jpeg' });
wrapped.profilePicture = profilePic;
// Check if we have a file
if (wrapped.isFile('profilePicture')) {
const file = wrapped.getFile('profilePicture');
console.log(`Uploaded file: ${file?.name}, Size: ${file?.size} bytes`);
}
// Convert to object for processing
const obj = wrapped.toObject();
console.log('Data keys:', Object.keys(obj));
return wrapped;
}
function handleFormSubmit(formElement: HTMLFormElement) {
const formData = new FormData(formElement);
const wrapped = createWrapper(formData);
// Add timestamp
wrapped.submittedAt = Date.now();
// Validate files
const uploadedFiles = wrapped.getFiles('documents');
const maxSize = 5 * 1024 * 1024; // 5MB
for (const file of uploadedFiles) {
if (file.size > maxSize) {
console.error(`File ${file.name} exceeds maximum size`);
wrapped.delete('documents');
wrapped.error = 'File too large';
}
}
// Add computed property
wrapped.fileCount = uploadedFiles.length;
// Get the modified FormData for submission
const finalFormData = wrapped.getRawData() as FormData;
// Submit with fetch
fetch('/api/submit', {
method: 'POST',
body: finalFormData
});
}
interface UserProfile {
name: string;
email: string;
avatar?: File;
documents?: File[];
}
function createUserProfile(data: UserProfile | FormData) {
const wrapped = createWrapper(data);
// Type-safe access
const name: string = wrapped.name;
const avatar: File | null = wrapped.getFile('avatar');
const docs: File[] = wrapped.getFiles('documents');
// Process files
if (avatar) {
console.log(`Avatar: ${avatar.name} (${avatar.type})`);
}
docs.forEach((doc, index) => {
console.log(`Document ${index + 1}: ${doc.name}`);
});
return wrapped.toObject();
}
The team is always here to help you. Happen to face an issue? Want to report a bug? You can submit one here on Github using the Issue Tracker. If you still have any questions, please contact us via the Telegram Bot or join in the Global Developer Community on Telegram.
Contributions are what make the open-source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!
git checkout -b feature/AmazingFeature)git commit -m 'Add some AmazingFeature')git push origin feature/AmazingFeature)The MIT License (MIT). Please see License File for more information.
FAQs
Salla Base
The npm package @salla.sa/base receives a total of 880 weekly downloads. As such, @salla.sa/base popularity was classified as not popular.
We found that @salla.sa/base demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.