
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
Development logger for choo.

var log = require('choo-log')
var choo = require('choo')
var app = choo()
app.use(log())
app.mount('body')
logger = log(opts)Create a new logger instance. Opts can contain:
true. Disable calls to window.performance timing
API. Timing calls will not run in browsers that don't support it out of the
box.true. Disable clearing the
window.performance resourcetimingbuffer when full. Set to false if
the buffer is cleared somewhere else.emitter.emit('log:<level>', msg)Send a log event. choo-log will pass log:<level> events through to nanologger. For example:
emitter.emit('log:info', 'The rain in Spain stays mainly in the plain 🌧')
These are just normal events, so you can listen to them in addition to them being logged:
emitter.on('log:debug', function (msg) {
// do something with debug message
})
localStorage.setItem('logLevel', <level>)Set the nanologger log level, e.g.:
localStorage.setItem('logLevel','debug')
$ npm install choo-log
FAQs
Development logger for choo
The npm package choo-log receives a total of 221 weekly downloads. As such, choo-log popularity was classified as not popular.
We found that choo-log demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 25 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.