
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
github.com/cloud-native-toolkit/itzcli
The itz
command line interface is a command line interface that provides CLI access to IBM Technology Zone.
Using itz
, you can:
See the QUICKSTART.
For usage documentation, see the documentation in the docs folder.
itz
Release packages for your OS can be found at https://github.com/cloud-native-toolkit/itzcli/releases.
To install itz
on Linux, use the install.sh script as shown here:
$ curl https://raw.githubusercontent.com/cloud-native-toolkit/itzcli/main/scripts/install.sh | bash -
Verify the installation by using the itz version
command to view the current
version.
By default, the script installs itz
in /usr/local/bin
. If you would like this to be in
a different location, you can set the ITZ_INSTALL_HOME
environment variable, like
this:
$ export ITZ_INSTALL_HOME=~/bin
$ curl https://raw.githubusercontent.com/cloud-native-toolkit/itzcli/main/scripts/install.sh | bash -
Note: if you have version 1.24 and installed itz with
brew
, you must use brew to uninstall itz and then re-install it.
If you have itz already installed and itz version
outputs 1.24 (or a lower
version), you must follow these steps first:
brew uninstall itz
brew untap cloud-native-toolkit/techzone
Once you have uninstalled itz, you can proceed to "Installing itz using brew".
To install itz
using Homebrew, follow these steps:
brew tap cloud-native-toolkit/homebrew-techzone
brew install itz
Version v0.1.245 and higher of itz
supports IBM's Single Sign On (SSO) to
authenticate against the TechZone APIs. To log in, type the following:
$ itz login
This command will automatically open a browser. You can log into IBM Verify with your IBM ID. When you are done, you can close the browser window.
For headless VMs or scripts, the itz login
command also supports authentication
using the token stored in a file. Log in at https://techzone.ibm.com and view your
profile using the My profile page. Copy the value from the API token field
and store the value in a file (e.g., ~/token.txt
). Then use the command as
shown to store the value:
$ itz login --from-file ~/token.txt
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.