
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
babel-plugin-transform-numeric-separator
Advanced tools
Remove numeric separators from Decimal, Binary, Hex and Octal literals
This plugin allows Babel to transform Decimal, Binary, Hex and Octal literals containing Numeric Literal Separator to their non-separated form.
let budget = 1_000_000_000_000;
// What is the value of `budget`? It's 1 trillion!
//
// Let's confirm:
console.log(budget === 10 ** 12); // true
let nibbles = 0b1010_0001_1000_0101;
// Is bit 7 on? It sure is!
// 0b1010_0001_1000_0101
// ^
//
// We can double check:
console.log(!!(nibbles & (1 << 7))); // true
// Messages are sent as 24 bit values, but should be
// treated as 3 distinct bytes:
let message = 0xA0_B0_C0;
// What's the value of the upper most byte? It's A0, or 160.
// We can confirm that:
let a = (message >> 16) & 0xFF;
console.log(a.toString(16), a); // a0, 160
// What's the value of the middle byte? It's B0, or 176.
// Let's just make sure...
let b = (message >> 8) & 0xFF;
console.log(b.toString(16), b); // b0, 176
// What's the value of the lower most byte? It's C0, or 192.
// Again, let's prove that:
let c = message & 0xFF;
console.log(c.toString(16), b); // c0, 192
hand wave emoji
Octals are great for permissions, but also look better when represented in 0o0000 form. No real benefit with separators here.
npm install --save-dev babel-plugin-transform-numeric-separator
.babelrc (Recommended).babelrc
{
"plugins": ["transform-numeric-separator"]
}
babel --plugins transform-numeric-separator script.js
require("babel-core").transform("code", {
plugins: ["transform-numeric-separator"]
});
If you need to further compile ES2015 Decimal, Binary, Hex and Octal number representations to their pre-ES2015 numeric literal form, add the "transform-es2015-literals" plugin:
transform-es2015-literalsis already included in babel-preset-env and babel-preset-es2015.
.babelrc (Recommended).babelrc
{
"presets": ["env"],
"plugins": ["transform-numeric-separator"]
}
{
"plugins": ["transform-numeric-separator", "transform-es2015-literals"]
}
FAQs
Remove numeric separators from Decimal, Binary, Hex and Octal literals
The npm package babel-plugin-transform-numeric-separator receives a total of 366 weekly downloads. As such, babel-plugin-transform-numeric-separator popularity was classified as not popular.
We found that babel-plugin-transform-numeric-separator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.