
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
PurgeTSS is a toolkit designed to enhance the development of mobile applications using the Titanium framework. It introduces several key features to streamline the app development process, making it simpler and more efficient for developers.
It offers a range of tools such as customizable utility classes, support for icon fonts, a user-friendly Animation module, a straightforward grid system, and the added convenience of the shades command for crafting personalized colors.
With PurgeTSS, creating visually appealing and dynamic mobile apps becomes more accessible and efficient.
Major Refactoring & ESM Migration: PurgeTSS v7.1 has been completely refactored with improved code organization, better ESM compatibility, enhanced error handling, and a more intuitive CLI experience.
config.js → config.cjs (same content, different extension for CommonJS compatibility)copy-fonts (use icon-library instead)build-legacy (legacy Tailwind build removed)purge.options.legacy configuration option completely removedbuild-fonts -p flag removed (now handled by -f flag)build-fonts command options simplified for better consistencybuild-fonts simplified:
-p (--icon-prefix-from-filename) flag-f flag now controls both font class names AND icon prefixes using filenamesbuild-legacy command and all legacy-related code for cleaner, modern codebaseFor most users, upgrading is seamless:
npm install -g purgetss@latest
Key changes to note:
build-legacy command, use the regular build command insteadlegacy: true in your config, remove this option (legacy mode completely discontinued)build-fonts with the -p flag, now use -f instead (handles both font classes and icon prefixes)Here are its main functionalities:
app.tss file, containing only the classes actually used in your project. This helps in reducing file size and improving performance.build-fonts command creates a fonts.tss file with class definitions and fontFamily selectors for various font types. It supports both regular fonts and icon fonts, with simplified options for using filenames as class names and icon prefixes.shades command that enables developers to generate custom color shades from a specified hex color, eliminating the need for external tools.Overall, PurgeTSS aims to simplify the mobile app development process, offering tools and features that enhance productivity and creativity in designing user interfaces.
FAQs
A package that simplifies mobile app creation for Titanium developers.
The npm package purgetss receives a total of 7 weekly downloads. As such, purgetss popularity was classified as not popular.
We found that purgetss demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.