
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
ambient2pwsweather
Advanced tools
ambient2pwsweather is an open source Node.js project providing a software bridge between Ambient Weather Stations (through AmbientWeather.net) and PWSWeather.com (and therefore Aeris Weather).
To use ambient2pwsweather, you must first install Node.js. After Node is installed, download and unzip the latest release into any given directory.
Customize the configuration by copying the config/default.json file to config/local.json and then editing your settings. If you edit default.json directly, it is likely that future versions of ambient2pwsweather will overwrite your customizations. Alternatively, you can use environment variables to override specific configuration variables.
Open a command line window (terminal on MacOS or follow these instructions for Windows) and issue the following commands within the ambient2pwsweather directory:
npm install
node index.js
The first command will install all the prerequisites and the second starts ambient2pwsweather. You will need to keep this window and process running in order to allow it to continue to retrieve data from AmbientWeather.net.
Below is the default configuration. You can easily customize and override any setting by copying the config/default.json file to config/local.json and then change any settings you desire.
{
"ambient" : {
"api_key" : "",
"app_key" : ""
},
"pwsweather" : {
"station_id" : "",
"password" : ""
},
"log_level" : "info",
"pws_base_url" : "http://www.pwsweather.com/pwsupdate/pwsupdate.php"
}
Alternatively, the following environment variables can be used to override configurations.
To install as a service, you must first install a service tool for your platform.
// for macOS
npm install node-mac
// for Windows
npm install node-windows
// for Linux
npm install node-linux
Then install as a service:
npm run service install
You can view logs through the standard/system logging for your platform.
For more details, visit the respective module npm page: macOS, Windows, Linux
Dan Wilson (@killroyboy / Web)
MIT
Code contributions are greatly appreciated, please submit a new pull request!
FAQs
Pull weather data from AmbientWeather.net and push to PWSWeather
We found that ambient2pwsweather demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.