
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
This package name is not currently in use, but was formerly occupied by another package. To avoid malicious use, npm is hanging on to the package name, but loosely, and we'll probably give it to you if you want it.
This package name is not currently in use, but was formerly occupied by another package. To avoid malicious use, npm is hanging on to the package name, but loosely, and we'll probably give it to you if you want it.
You may adopt this package by contacting support@npmjs.com and requesting the name.
The 'fs-extra' package builds on the standard 'fs' module by adding more methods and making some of the existing methods more convenient to use. It provides additional functionality like copying, moving, and ensuring file and directory existence, which are not available in the standard 'fs' module.
The 'graceful-fs' package is a drop-in replacement for the 'fs' module that improves the handling of EMFILE errors (too many open files) by queueing the operations. It is useful in environments where you might hit the file descriptor limit.
The 'node-fs' package is an extension of the 'fs' module that provides additional methods for file and directory operations, such as recursive directory creation and file copying. It offers more features than the standard 'fs' module but is less commonly used than 'fs-extra'.
FAQs
This package name is not currently in use, but was formerly occupied by another package. To avoid malicious use, npm is hanging on to the package name, but loosely, and we'll probably give it to you if you want it.
The npm package fs receives a total of 1,596,786 weekly downloads. As such, fs popularity was classified as popular.
We found that fs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.