
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
all-the-package-names
Advanced tools
Maintained by jsDelivr. Please consider becoming a sponsor to support us.
A list of all the public package names on npm.
npm install all-the-package-names --save
The module exports a big flat array of package names:
const names = require("all-the-package-names")
names.includes('superagent')
// => true
// Check if a given package name exists
names.includes('crazy-new-package-name')
// => false
names.length
// => 286289
names.filter(name => name.includes('banana'))
// => [ 'banana', 'banana-banana', 'banana-split', ...]
// Note: This example requires node 4 or greater because it uses
// const, arrow functions, and the `includes` array/string helper.
You can also use it on the command line. Newline-delimited names are piped to STDOUT:
npm i -g all-the-package-names
all-the-package-names | grep spell
Note that while mixed-case package names are no longer allowed to be published to the npm registry, there are over 2800 legacy mixed-case packages, many of which have the same spelling as other existing lowercase packages. See nice-registry/mixed-case-package-names for the the full list.
To avoid the mixed-case names when working with this data, just filter them out:
const names = require('all-the-package-names')
.filter(name => name === name.toLowerCase())
npm install
npm test
None
true if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.MIT
FAQs
A list of all the public package names on npm. Updated daily.
The npm package all-the-package-names receives a total of 8,202 weekly downloads. As such, all-the-package-names popularity was classified as popular.
We found that all-the-package-names demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.