
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
**This repo is under active development and is not production-ready. We are actively developing as an open source project.**
This repo is under active development and is not production-ready. We are actively developing as an open source project.
This project aims to provide a headless runtime for WebGL and OpenGL ES shaders under Node.js. This package will use the ANGLE engine to translate WebGL and OpenGL ES shaders to the target runtime. Please see the ANGLE project for more details on support.
Future plans include surfacing an API for running Compute Shaders and a OpenGL ES API. Patches are welcome!
To create a new WebGLRenderingContext or WebGL2RenderingContext - simply include the package and call createWebGLRenderingContext():
const nodeGles = require('node-gles');
const gl = nodeGles.binding.createWebGLRenderingContext();
// Now, use `gl` for regular WebGL calls:
const tex = gl.createTexture();
gl.bindTexture(gl.TEXTURE_2D, texture);
gl.texParameteri(gl.TEXTURE_2D, gl.TEXTURE_WRAP_S, gl.CLAMP_TO_EDGE);
gl.texParameteri(gl.TEXTURE_2D, gl.TEXTURE_WRAP_T, gl.CLAMP_TO_EDGE);
...
Clone this repo for current demos - examples coming soon
$ yarn ts-node src/tests/float_texture_upload_test.ts
...
buffer: Float32Array [ 0.5, 1.5, 2.5, 3.5 ]
$ yarn ts-node src/tests/half_float_texture_upload_test.ts
...
buffer: Float32Array [ 0.5, 1.5, 2.5, 3.5 ]
$ yarn ts-node src/tests/unsigned_byte_texture_upload_test.ts
...
buffer: Uint8Array [ 1, 2, 3, 4 ]
Build instructions are under heavy development and will include an Angle binary
This project currently requires ANGLE to be checked out and built in the same parent folder as this repo. Checkout and build ANGLE with the Debug setup. After ANGLE is built, run yarn for this project.
FAQs
**This repo is under active development and is not production-ready. We are actively developing as an open source project.**
We found that node-gles demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.