
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
ldn-inbox-server
Advanced tools
An experimental LDN inbox server for Event Notification messages.
yarn add ldn-inbox-server
Create required directories
mkdir config inbox public
Copy an example JSON Schema as config/notification_schema.json from this project.
Start the server:
npx ldn-inbox-server start-server --port 8000
Send a demonstration Event Notifications message:
curl -X POST -H 'Content-Type: application/ld+json' --data-binary '@examples/offer.jsonld' http://localhost:8000/inbox/
Start an inbox handler with a demo handler (that creates an Accept message in the ./outbox).
npx ldn-inbox-server handle @inbox -hn ./handler/demo_notification_handler.js
Send the notifications in the outbox:
npx ldn-inbox-server handle @outbox
LOG4JS : log4js logging levelLDN_SERVER_HOST : default LDN inbox hostLDN_SERVER_PORT : default LDN inbox portLDN_SERVER_INBOX_URL : default LDN inbox url (path)LDN_SERVER_INBOX_PATH : default LDN inbox pathLDN_SERVER_ERROR_PATH : default LDN error pathLDN_SERVER_OUTBOX_PATH : default LDN outbox pathLDN_SERVER_PUBLIC_PATH : default public (HTML) pathLDN_SERVER_JSON_SCHEMA : default notification JSON validation schemaServer extensions are possible by providing custom inbox and notification handlers. E.g.
npx ldn-inbox-server handle-inbox --inbox_handler ../handler/demo_inbox_handler --notification_handler ../handler/demo_notification_handler.js
Or, in JavaScript:
const { handle_inbox } = require('ldn-inbox-handler');
main();
async function main() {
await handle_inbox('./inbox', {
'notification_handler': myHander
});
}
async function myHandlder(notifiction,options) {
// ... do your thing
}
A handler can be started on any directory. E.g. a worlflow might be:
FAQs
A demonstration Event Notifications Inbox server
The npm package ldn-inbox-server receives a total of 12 weekly downloads. As such, ldn-inbox-server popularity was classified as not popular.
We found that ldn-inbox-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.