
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
github.com/elastic/go-elasticsearch/_examples
This directory contains examples and recipes for the Elasticsearch Go client.
The configuration.go
and customization.go
files contain information for configuring and customizing the client transport.
The logging
directory contains examples for using the default loggers and implementing a custom logger.
The bulk
directory contains a comprehensive example of using the Bulk API.
The encoding
directory contains examples of using third-party packages
and client helper methods for a more efficient encoding and decoding of the request and response bodies.
The fasthttp
directory contains a demonstration of replacing the default client transport with an HTTP client from the github.com/valyala/fasthttp
package.
The instrumentation
directory contains recipes for instrumenting the client with the OpenCensus and Elastic APM packages.
The extension
directory contains an example of extending the client APIs, for example
to support custom endpoints installed by a plugin.
The cloudfunction
directory contains a simple web service for checking Elasticsearch cluster status.
The xkcdsearch
directory contains a command-line utility for indexing and searching an archive of xkcd.com artworks.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.