
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@sanity/pkg-utils
Advanced tools
Simple utilities for modern npm packages.
npm install @sanity/pkg-utils -D
# Initialize a new package
pnpx @sanity/pkg-utils@latest init my-package
# In a Node.js package directory with `package.json` present
# Check the package
pkg-utils check
# Build the package
pkg-utils build
# Watch the package
pkg-utils watch
Run pkg-utils -h for more information on CLI usage.
@sanity/pkg-utils reads most of its configuration from package.json. But sometimes you need more
control. You may then add a configuration file named package.config.ts (or .mts, .js, or
.mjs).
// package.config.ts
import {defineConfig} from '@sanity/pkg-utils'
export default defineConfig({
extract: {
rules: {
// do not require internal members to be prefixed with `_`
'ae-internal-missing-underscore': 'off',
},
},
// the path to the tsconfig file for distributed builds
tsconfig: 'tsconfig.dist.json',
})
bundlesPkgBundle[]undefinedAn array of entry points to bundle. This is useful if you want to bundle something that should not be exported by the package, e.g. CLI scripts or Node.js workers.
defineRecord<string, string | number | boolean | null | undefined>{}An object defining globals within the package.
diststring'./dist'The path to the directory to which bundle and chunk files should be written.
exportsPkgConfigProperty<PkgExports>"exports" in package.jsonOverride or modify the value of the exports before it’s parsed internally.
extract{
rules?: {
'ae-incompatible-release-tags'?: PkgRuleLevel
'ae-internal-missing-underscore'?: PkgRuleLevel
'ae-missing-release-tag'?: PkgRuleLevel
}
}
undefinedConfigure the level of reporting of API Extractor (which is used to bundle the type definitions, as well as lint the TSDoc of the package).
externalstring[][]Packages to exclude from bundles.
jsx'transform' | 'preserve' | 'automatic''automatic'Strategy for bundling JSX.
jsxFactorystring'createElement'The name of the function that creates JSX elements.
jsxFragmentstring'Fragment'The name of JSX fragment elements.
jsxImportSourcestring'react'The name of the library from which to import JSX factory and fragment names.
minifybooleanfalseWhether to minify the bundled JavaScript.
rollup.pluginsPkgConfigProperty<RollupPlugin[]>[]Rollup plugins to load when bundling.
runtime'*' | 'browser' | 'node''*'Default runtime of package exports
sourcemapbooleantrueWhether to include source map files.
srcstring'./src'The path to the directory in which source code is located.
tsconfigstring'tsconfig.json'The path to the TypeScript configuration file.
MIT
FAQs
Simple utilities for modern npm packages.
The npm package @sanity/pkg-utils receives a total of 15,450 weekly downloads. As such, @sanity/pkg-utils popularity was classified as popular.
We found that @sanity/pkg-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.