
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
aeris-weather
Advanced tools
aeris-weather is a chainable Node.js client for accessing Aeris Weather API
npm install aeris-weather
const Aeris = require('aeris-weather');
var aerisApi = new Aeris('[your-app-id]', '[your-secret-key]');
To get observation data for Auckland, NZ:
aerisApi.endpoint('observations/summary').action('closest').place('-45.039948,168.695312').filter('allstations').limit(1).process().then(function (data) {
console.log('Auckland weather', data);
});
Or using callback:
aerisApi.endpoint('observations/summary').action('closest').place('-45.039948,168.695312').filter('allstations').limit(1).process(function (err, data) {
console.log('Auckland weather', data);
});
Or using non-chained calls:
aerisApi.endpoint('observations/summary');
aerisApi.action('closest');
aerisApi.place('-45.039948,168.695312');
aerisApi.filter('allstations');
aerisApi.limit(1);
aerisApi.process(function (err, data) {
console.log('Auckland weather', data);
});
Batch request for 24 hours and 7 day of forecast:
aerisApi.action('closest').place('-45.039948,168.695312').limit(7).filter('day');
aerisApi.batch('forecasts');
aerisApi.filter('1hr').limit(24);
aerisApi.batch('forecasts');
aerisApi.process(function (err, data) {
console.log('Auckland forecast hours', data.response.responses[0].response[0]);
console.log('Auckland forecast days', data.response.responses[1].response[0]);
});
NOTE: Parameters applying to a batch must be set prior to calling batch. In addition parameters persist between batch calls, but can be set to blank or null. Parameters DO NOT persist between process calls.
This is not a comprehensive SDK implementation and should be taken as a starting point for future implementation.
Possible Features/Improvements:
In order to run unit tests, create the following files within the test directory:
aeris-id.txt (should contain a valid app/client ID)aeris-secret.txt (should contain a valid secret key)Then run npm run test from the command line.
In lieu of a formal style guide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code.
Copyright (c) 2018 Dan Wilson & Skydrop Holdings, LLC. Licensed under the MIT license. See LICENSE.
FAQs
Node.js Client to access data from Aeris Weather API
The npm package aeris-weather receives a total of 3 weekly downloads. As such, aeris-weather popularity was classified as not popular.
We found that aeris-weather demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.