
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
github.com/nlp-suite/nlp-suite-runner
Supply Chain Security
Vulnerability
Quality
Maintenance
License
The NLP Suite Runner is the new, official tool to install and run the NLP Suite. The NLP Suite Runner is a binary that automatically installs 3 main packages:
The NLP Suite Runner requires the presence and installation of Docker Desktop.
To install the NLP Suite, Docker desktop requires at least 4GB of RAM. The NLP Suite Runner strongly encourages that you have at least 10 GB of storage available.
To install the NLP Suite Runner, first ensure that you have downloaded and installed Docker Desktop. You can find a list of NLP Suite Runner binaries for your operating system in the latest release here.
Mac and Linux systems can easily extract .tar.gz
files without additional tools.
If you have a mac running the ARM M-chip series, ensure that you install the darwin-arm64
version of the NLP Suite Runner.
If you have the Intel chip, you will need to install the darwin-amd64
version of the NLP Suite Runner.
To extract the runner, you will need 7-zip, a file archiver tool for Windows.
You most likely will need to install the windows-amd64
version of the NLP Suite Runner.
If your device has an ARM chip, ensure you have windows-arm64
installed. To check which version you have, check here.
First ensure that you have first started Docker Desktop. It is required to run the NLP Suite Runner. To run the NLP Suite Runner, double click the binary/exe to start it.
You may see an error indicating that the NLP Suite Runner cannot be opened because it is not coming from a trusted source. This is expected to occur the first time you run the NLP Suite Runner. To start the runner, follow these instructions to allow the NLP Suite Runner to open.
There are no known issues for starting and running the NLP Suite Runner at this time.
While the NLP Suite Runner automatically updates the installed packages mentioned above, the NLP Suite Runner does not automatically update itself. Periodically check this page to ensure you have the latest version installed.
If there are any issues you are encountering, header over to Issues to open a ticket.
If you would like to contribute to the NLP Suite, please contact Roberto Franzosi
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.