
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@vkontakte/sprites
Advanced tools
  
Module for generate SVG sprites and PNG fallback that used in m.vk.com
Inkscape (>= 0.91)
Node.JS (>= 8)
npm install @vkontakte/sprites or yarn add @vkontakte/sprites
See demo/index.js
To generate Sprites you just need to run
generate(path, output = {}, converter, options)
path is place on your filesystem where module loads SVG iconsconverter see PNG Fallback sectionIn this time there is single PNG converter Inkscape, but you can PR your if you need. It is simple, you just need to extend BaseConverter
To create PNG converter you need to import it
const InkscapeConverter = require("@vkontakte/sprites/src/convert/InkscapeConverter")
Then create new instance of Converter
const converter = new InkscapeConverter([1, 2], pngPath, "/opt/local/bin/inkscape"),
And use as param for generating sprites
FAQs
  
We found that @vkontakte/sprites demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.