Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
By Kush Pandya - Jun 06, 2025
🚀 Big News: Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team.Learn more →
github.com/npoolplatform/cloud-hashing-apis
- Version published
- Created
Npool go service app template
功能
- BFF层的API服务
- Common review interface
- Add all update api in apis to check app-user-id authorization
命令
- make init
初始化仓库，创建go.mod - make verify
验证开发环境与构建环境，检查code conduct - make verify-build
编译目标 - make test
单元测试 - make generate-docker-images
生成docker镜像 - make cloud-hashing-apis
单独编译服务 - make cloud-hashing-apis-image
单独生成服务镜像 - make deploy-to-k8s-cluster
部署到k8s集群
最佳实践
- 每个服务只提供单一可执行文件，有利于docker镜像打包与k8s部署管理
- 每个服务提供http调试接口，通过curl获取调试信息
- 集群内服务间direct call调用通过服务发现获取目标地址进行调用
- 集群内服务间event call调用通过rabbitmq解耦
关于mysql
- 创建app后，从app.Mysql()获取本地mysql client
- 文档参考
GRPC
FAQs
Unknown package
Package last updated on 30 Nov 2022
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Product
Socket Now Supports pylock.toml Files
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
By Trevor Norris - Jun 05, 2025
Security News
Research
Destructive npm Packages Disguised as Utilities Enable Remote System Wipe
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.
By Kush Pandya - Jun 05, 2025