
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
syntax-error
Advanced tools
Detect and report syntax errors in source code strings.
When you type node src.js you get a friendly error report about exactly where
the syntax error is. This module lets you check for syntax errors and report
them in a similarly friendly format that wrapping a try/catch around
Function() or vm.runInNewContext() doesn't get you.
var fs = require('fs');
var check = require('syntax-error');
var file = __dirname + '/src.js';
var src = fs.readFileSync(file);
var err = check(src, file);
if (err) {
console.error('ERROR DETECTED' + Array(62).join('!'));
console.error(err);
console.error(Array(76).join('-'));
}
$ node check.js
ERROR DETECTED!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
/home/substack/projects/node-syntax-error/example/src.js:5
if (Array.isArray(x) res.push.apply(res, x);
^
ParseError: Unexpected identifier
---------------------------------------------------------------------------
var check = require('syntax-error')
Check the source code string src for syntax errors.
Optionally you can specify a filename file that will show up in the output.
If src has a syntax error, return an error object err that can be printed or
stringified.
If there are no syntax errors in src, return undefined.
Options will be passed through to acorn-node. acorn-node defaults to options that match the most recent Node versions.
Return the long string description with a source snippet and a ^ under
pointing exactly where the error was detected.
short string description of the error type
line number of the error in the original source (indexing starts at 1)
column number of the error in the original source (indexing starts at 1)
With npm do:
npm install syntax-error
MIT
JSHint is a static code analysis tool used in software development for checking if JavaScript source code complies with coding rules. It is more comprehensive than syntax-error as it checks for errors and potential problems in code style and logic, not just syntax errors.
ESLint is a pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. It is more advanced than syntax-error, offering customizable rules for coding standards and errors, including syntax errors, code smells, and stylistic issues.
Acorn is a tiny, fast JavaScript parser, written completely in JavaScript. While syntax-error uses Acorn internally to detect syntax errors, Acorn itself is a more powerful tool that can be used for parsing JavaScript code into an abstract syntax tree (AST), which can then be analyzed or manipulated for various purposes.
FAQs
detect and report syntax errors in source code strings
The npm package syntax-error receives a total of 1,101,892 weekly downloads. As such, syntax-error popularity was classified as popular.
We found that syntax-error demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 39 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.