
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
Modified an improved filesystem, original https://npmjs.org/memory-fs
Added:
* Symbolic links
* FileSystem mounting ^1
* FileSystem exporting in base64
* Filesystem importing of base64 encoded imemfs filesystem
Removed:
* aSync versions of commands (will return soon)
Changed:
* rmdirSync & unlinkSync can now override mount/symlink protection with `override` parameter set to `true`
* writeFileSync has optional encoding of `meta` for support of importing imemfs folder objects (used for mounts and symlinks)
var imemfs=require("imemfs");
var fs=new imemfs();
fs.symlink(source, target); //* Creates a symbolic link
// fs.symlink("/folder_from","/path/to/new/folder"); - /path/to/new/folder/lets_go = /folder_from/lets_go
fs.desymlink(target); //* Removes a symbolic link
fs.mount(fs, path); //* Mounts another FileSystem object
fs.unmount(path); //* Unmounts a FileSystem mount point
fs.meta(_path); //~ Returns the raw object of a file/folder
fs.existsSync(_path); // Checks if file/folder exists
fs.statSync(_path); //- Returns stats on a path
fs._export(); //* Exports the FileSystem in base64
fs._import(b64_fs); //* Imports a base64 encoded FileSystem
fs.readFileSync(_path, encoding); // Reads a file
fs.readdirSync(_path); // Reads a directory listing
fs.mkdirpSync(_path); // Cretes directory and all parent directories
fs.mkdirSync(_path); // Create a directory if parent directory exists
fs.rmdirSync(_path, override = false); //~ Removes a directory
fs.unlinkSync(_path, override = false); //~ Removes a file
fs.writeFileSync(_path, content, encoding); //~ Creates and/or Writes a file
* New methods created by me
~ Modified from original method
- Soon to be removed/redesigned method
^1 Other imemfs filesystems supported only
Copyright (c) 2012-2014 Tobias Koppers
FAQs
Virtual filesystem
We found that imemfs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.