
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
nanodoc
Advanced tools
Nanodoc is a minimalist document bundler designed for stiching hints, reminders and short docs. Useful for prompts, personalized docs highlights for your teams or a note to your future self
No config, nothing to learn nor remember. Short , simple, sweet.
$ nanodoc file1.txt file2.txt
$ nanodoc -n file1.txt file2.txt # Per-file line numbering $ nanodoc -nn file1.txt file2.txt # Global line numbering $ nanodoc -nn --toc file1.txt file2.txt # Global numbering with TOC
Nanodoc is flexible in how you specify the files to bundle:
$ nanodoc ... # individual files $ nanodoc # all txt and md files in the dir will be included $ nanodoc # mix and match as you'd like $ nanodoc # any .bundle.* file that is a list of paths, one per line $ nanodoc # a file that mixes text and file paths, where paths are replaced with their content
Get only parts of a file:
$ nanodoc readme.txt:L14-16,L30-50 # get the good parts only
-n: Add per-file line numbering (01, 02, etc.)-nn: Add global line numbering: useful for referencing the full doc gen later--toc: Generate a table of contents at the beginning--seq: numerical, roman or letter for ref the file sequence--style: nice (Human Readable (human-readable.txt), or file, or full-pathGenerated a doc good enough to repeat, export the bundle
$nanodoc --export-bundle bestdocs.bundle.txt ...
Nothing to config. Nothing to learn. No tutorials to watch.
In fact, you've just went through the full documentation. $ nanodoc --help # all there is
nanodoc is available at a distributor near you:
pip install nanodoc
pipx install --user nanodoc
Contributions are welcome! Say hi, curse me for eternity or even send in something constructive. Feel free to open issues or submit pull requests.
(just keep it short, we're nano people after all)
MIT License
FAQs
A minimalist document bundler designed for stitching hints, reminders and short docs.
We found that nanodoc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.