
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
Welcome to the Yoti NodeJS SDK. This repo contains the tools and step by step instructions you need to quickly integrate your NodeJS back-end with Yoti so that your users can share their identity details with your application in a secure and trusted way.
Requirements - Check you have what you need
Installing the SDK - How to install our SDK
Setup - Setup required before using the Yoti services
Products - Links to more information about the products offered by the Yoti SDK
Support - Please feel free to reach out
Please refer to Travis to see all compatible Node versions.
If you're planning on using the Node SDK on Windows, you'll need to install a few dependencies first:
OpenSSL (normal version, not light) in the same bitness as your Node.js installation.
C:\OpenSSL-Win32 or C:\OpenSSL-Win64)node-gyp (npm install -g node-gyp)
npm install --global --production windows-build-toolsTo import the Yoti SDK inside your project, you can use your favourite dependency management system. If you are using NPM, you can use the following command to set the Yoti SDK as a dependency:
npm install -S -E yoti
Your package.json file will then be updated to include:
"dependencies": {
"yoti" : "x.x.x"
}
For each service you will need:
The Yoti SDK can be used for the following products, follow the links for more information about each:
For any questions or support please contact us here: https://support.yoti.com Please provide the following to get you up and working as quickly as possible:
Once we have answered your question we may contact you again to discuss Yoti products and services. If you’d prefer us not to do this, please let us know when you e-mail.
For further documentation, see https://developers.yoti.com/yoti/welcome
FAQs
Yoti NodeJS SDK for back-end integration
The npm package yoti receives a total of 4,285 weekly downloads. As such, yoti popularity was classified as popular.
We found that yoti demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.