
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
formidable-landers
Advanced tools
Welcome to the HQ of maintaining our visible Formidable projects!
We use yarn, so make sure to have a current version installed, then install
this project.
$ npm install -g yarn
$ yarn install
Demo the header and footer components by running:
$ yarn demo
and visit http://localhost:5678/.
The usual:
$ yarn run lint
$ yarn run test
# ... or all together ...
$ yarn run check
Before publishing, if you want to test the changes you’ve made to
formidable-landers, you can build what you have and use npm link in the repo
where you want to see teh changes.
In formidable-landers, run:
$ yarn build
then run:
$ npm link
Then, in a repo you want to test, such as formidable.com, run:
$ npm link formidable-landers
and you should see your changes! 🎉
If npm link is being futzy or giving you problems, take a look at
lank which requires a bit more
learning curve and setup, but produces a far more manageable and reliable
way of working with multiple dependent repos at the same time.
When publishing, please make sure to install and use npm@5.6.0 to preserve
file timestamp metadata as it is required for our overall website build and
versions subsequent to 5.6.0 intentionally destroy this metadata:
$ npm install -g npm@5.6.0
$ npm --version
5.6.0
master.$ npm version major|minor|patch -m "Version %s - INSERT_REASONS"
$ npm publish
$ git push && git push --tags
FAQs
Reusable components for Formidable's marketing sites
The npm package formidable-landers receives a total of 289 weekly downloads. As such, formidable-landers popularity was classified as not popular.
We found that formidable-landers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 31 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.