
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
vite-plugin-ssam-timelapse
Advanced tools
Export a Canvas image at each file save. Use it with Ssam or any HTML Canvas
This plugin is created to be used with Ssam to create a visual documentation of your sketch over time. It may also be used with other libraries if you can get a Canvas object reference.
npm i -D vite-plugin-ssam-timelapse
When the plugin detects a change in the sketch source code, it will export a PNG image with sequential numbering into timelapse directory. If the directory doesn't exist, it will make one for you. You can later convert the resulting image sequence into a video to create a visual documentation of your sketch. When you close the Vite server and later come back to the same sketch, it will continue incrementing image filenames from where you left off.
✋ If you use Git, you may want to include
timelapsedirectory in.gitignore.
In Vite config:
import { ssamTimelapse } from "vite-plugin-ssam-timelapse";
export default defineConfig({
plugins: [ssamTimelapse()],
// ...
});
In your Ssam sketch source code:
import { ssam } from "ssam";
const sketch = ({ wrap, canvas }) => {
if (import.meta.hot) {
import.meta.hot.on("ssam:timelapse-changed", () => {
import.meta.hot?.send("ssam:timelapse-newframe", {
image: canvas.toDataURL(),
});
});
}
wrap.render = () => {
// your drawing code
};
};
const settings = {
dimensions: [800, 800],
};
ssam(sketch, settings);
You can use the plugin with Vanilla JS or other Canvas libraries as long as you can get a reference to the Canvas object.
const canvas = document.createElement("canvas");
canvas.width = canvas.height = 600;
document.body.appendChild(canvas);
const ctx = canvas.getContext("2d")!;
// make changes to drawing code and save
ctx.fillStyle = `gray`;
ctx.fillRect(0, 0, 600, 600);
ctx.beginPath();
ctx.arc(300, 300, 300, 0, Math.PI * 2);
ctx.fillStyle = `white`;
ctx.fill();
// at each save, canvas image will be exported
if (import.meta.hot) {
import.meta.hot.on("ssam:timelapse-changed", () => {
import.meta.hot?.send("ssam:timelapse-newframe", {
image: canvas.toDataURL(),
});
});
}
ssamTimelapse({
// detect changes in the src directory
watchDir: "./src",
// will create the directory if it does not exist
outDir: "./timelapse",
// overwrite existing files
overwrite: false,
// ignore dotfiles. empty files are ignored by default.
// you can use regex, string or string[]
ignored: /(^|[\/\\])\../
// how quickly plugin responds to file change (in milliseconds). see Chokidar documentation
stabilityThreshold: 10_000,
// how many zeros to pad to filename
padLength: 5,
// console logging in browser
log: true,
});
When overwrite is set to true, every time the Vite server restarts, it will overwrite existing files on the outDir.
To avoid too frequent image exports, the default stabilityThreshold is set to 10 seconds, meaning the plugin will wait 10 seconds for all file changes to be settled.
Use a video editing program to convert the image sequence into a video file. If you have ffmpeg installed, it is as simple as running the following command:
ffmpeg -framerate 5 -pattern_type glob -i '*.png' -c:v libx264 -preset slow -crf 20 -pix_fmt yuv420p -y output.mp4
Note that ffmpeg expects the filenames to be sequential. From my testing on Mac, '*.png' will continue to work even if some images are missing, but if you get an error, you will need to rename them before running the ffmpeg command.
MIT
FAQs
Export a Canvas image at each file save. Use it with Ssam or any HTML Canvas
We found that vite-plugin-ssam-timelapse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.