
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
general-hammond
Advanced tools
Reads your cascading service config file, enforces its content, and hands it to you for immediate utilisation. You have a go.

npm i general-Hammond
hammond([domain], [keys])domain - the domain of the config to use (optional, no default) - see
cascading service config
for more infokeys - required keys in the config. see assert keys
for more info. this is run after the config is parsed as a CSC.returns a function that takes one argument, a callback. the callback is passed a single argument, the config. If the config is not found or the fails to parse, an error is thrown (it's assumed that you want the process to terminate at that point)
require('general-hammond')('api-server', ['port'])(function(config) {
// at this point it is guaranteed that the config was found and had a `port`
// property set under the `api server` domain.
http.createServer().listen(config.port);
});
General Hammond will look in several places for the config:
--config command-line argument.global.config—this
is most useful for supplying a configuration during testing, or other use cases
the involve requiring the module the needs configuration.You can override settings in the config by specifying the GH_CONFIG_OVERRIDE environment variable. The value should be a stringified JSON object with values that override those in the config. The values are overlayed by using deep-extend.
For example, given config.json {"service": {"port": 2345, "name": "service!"}}:
export GH_CONFIG_OVERRIDE='{"service":{"port":5678}}'
node service --config config.json
The service receives this config: {"service": {"port": 5678, "name": "service!"}}
FAQs
read, configure and enforce a configuration file.
We found that general-hammond demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.