
Research
/Security News
GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.
@tonguetoquill/collection
Advanced tools
This package redistributes the core Quills and supporting templates from the [TTQ Quills and Templates Collection](https://github.com/nibsbin/tonguetoquill-collection) for consumption in Node.js environments.
This package redistributes the core Quills and supporting templates from the TTQ Quills and Templates Collection for consumption in Node.js environments.
# npm
npm install @tonguetoquill/collection
This package doesn't export any logic. Instead, it exports two string constants—QUILLS_DIR and TEMPLATES_DIR—that represent the absolute file paths to the bundled quills and templates on your local filesystem.
Use @quillmark/registry and @quillmark/wasm from npm alongside this package. The engine and registry APIs replace a separate Quillmark CLI install for Node.js workflows.
You can use QUILLS_DIR with the FileSystemSource from @quillmark/registry to load them into the engine.
import { Quillmark } from '@quillmark/wasm';
import { QuillRegistry, FileSystemSource } from '@quillmark/registry';
import { QUILLS_DIR } from '@tonguetoquill/collection';
async function setupRegistry() {
const engine = new Quillmark();
// Point the filesystem source to the quills directory provided by this package
const source = new FileSystemSource(QUILLS_DIR);
// Initialize the registry
const registry = new QuillRegistry({ source, engine });
// You can now resolve specific quills!
const usafMemoBundle = await registry.resolve('usaf_memo');
}
This package relies on standard Node builtin modules (node:path and node:url) and standard ES Module constants (import.meta.url) under the hood to calculate the absolute paths at runtime. It is 100% compatible and robust across Node.js (16+), Bun, and Deno.
FAQs
This package redistributes the core Quills and supporting templates from the [TTQ Quills and Templates Collection](https://github.com/nibsbin/tonguetoquill-collection) for consumption in Node.js environments.
We found that @tonguetoquill/collection demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.

Security News
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.

Security News
A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.