
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
gulp-concat-js
Advanced tools
gulp-concat-jsGulp plugin for concatenating javascript with sourcemaps.
This gulp plugin will concatenate all source files together with some magic,
so that it still works to require the other files. You only have to ensure you always
use "./" when requiring local modules.
If you run your code through an uglifier after this, you have obfuscated your code!
This module is made for a specific, and will be limited in functionality and flexibility. Using it without source maps is not supported.
Here is a very simple gulpfile for using this module:
var gulp = require("gulp");
var sourcemaps = require("gulp-sourcemaps");
var concat = require("gulp-concat-js");
gulp.task("build", function () {
return gulp.src(["lib/*.{js,json}", "lib/**/*.{js,json}"])
.pipe(sourcemaps.init())
.pipe(concat({
"target": "concatenated.js", // Name to concatenate to
"entry": "./main.js" // Entrypoint for the application, main module
// The `./` part is important! The path is relative to
// whatever gulp decides is the base-path, in this
// example that is `./lib`
}))
.pipe(sourcemaps.write())
.pipe(gulp.dest("dist"));
});
See LICENSE.md
FAQs
Gulp plugin for concatenating javascript with sourcemaps
The npm package gulp-concat-js receives a total of 369 weekly downloads. As such, gulp-concat-js popularity was classified as not popular.
We found that gulp-concat-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.