
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
amphora-schedule
Advanced tools
A scheduling module for Amphora to schedule pages/layouts to so those can be published at a future date.
First install the module:
$ npm install -s amphora-schedule
Then pass the module into Amphora as an item for the plugins array property.
amphora({
...
plugins: [
...
require('amphora-schedule'),
...
],
...
})
At startup time the module will create the db schema and table needed to work properly (a new schedule schema with pages -- each with their own id and data), this is done using the amphora database adapter. After the database is ready, this module will act as any other amphora plugin that sets up
a route -- domain/_schedule in this case -- and handles requests made to that route.
What makes this plugin "special" is its ability to frequently "poll" the database looking for scheduled pages (in the new table) in order to publish them. This logic is implemented in the schedule.js file inside the services folder. There will be an interval delay that determines the "polling" frequency.
The main reason this was made as an external module and not part of amphora's core, is to make it an optional feature that any amphora instance could use.
A GET request to the domain/_schedule endpoint will return an array of objects that look like the following:
{
"id": "domain/_schedule/id",
"data": {
"at": 1671541200000,
"publish": "domain/_pages/clbr3qz9600000iddckqyk2oj"
}
To schedule a page a POST request has to be made to the _schedule route with a payload object that looks like the following:
{
"at": 1671645600050,
"publish": "domain/_pages/id"
}
Where at is the desired time in the future when the page should be published, and publish is the URI of the page that would be published.
To unschedule a page a DELETE request has to be made to the same route with the id as part of the URL. It will like the following:
domain/_schedule/id
The id is generated when the page is scheduled.
CLAY_SCHEDULING_ENABLED: Must be set to true in order to enable amphora-schedule to check, between intervals, for publishing instances. If this is not set or equal to false, it will still save the schedule pages but will not publish them.
MIT
FAQs
A scheduling module for Amphora
The npm package amphora-schedule receives a total of 86 weekly downloads. As such, amphora-schedule popularity was classified as not popular.
We found that amphora-schedule demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.