
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
Ism is a multiplayer turn-based strategy game currently in early development. Some features include:
npm install -g ism
or if you would like to follow the currently rapid development:
git clone https://github.com/caseman/ism.git
cd ism
npm install
npm link
I try hard to make sure that everything works in the master branch, though I can't make any guarantees!
Ism consists of a server and console client. To run the client once installed simply use:
ism
For local games, the client will automatically launch a local server for you. To run a server separately, you can use:
ism-server
By default this will listen on all interfaces on port 5557. This is configurable via command line options:
Usage: ism-server
Options:
-h, --host host name or address to listen on [default: "0.0.0.0"]
-p, --port port number to listen on [default: 5557]
-v, --verbose More verbose logging of client connections
--debug Debug logging of all client/server activity
--version Output the software version and exit
-d, --database path to game database directory (will be created on start) [default: "/home/caseman/.ism/db"]
Note that only one server can be running at a time for each game database. If you are running a server locally with the default database, the client will automatically use it for local games.
All games are automatically saved to the server's database. As the game progresses the database is automatically updated, thus there is no "save game" command. Any game that you have started on a server can be resumed where it left off. This means that the client and server can be restarted at will without losing anything.
Currently a game can only be resumed from the client that initially joined it. In time the ability to resume your games from anywhere will be implemented.
There is currently very little gameplay implemented, as the focus has been on getting the map generation, client/server infrastructure and client user interface built. Basically all you can do is select your people, move them around to explore the map, and scroll the map view.
The mouse is supported, though all functions are available via the keyboard.
ESC: Return to title screen
,: Select previous person
.: Select next person
h: Move left
l: Move right
j: Move down
k: Move up
y u b n: Move diagonally
Hold down CTRL or SHIFT with the movement keys to scroll. You can also
scroll using the arrow keys.
FAQs
Turn-based multiplayer nation building strategy game
The npm package ism receives a total of 9 weekly downloads. As such, ism popularity was classified as not popular.
We found that ism demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.