
Security News
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
With the eventual goal of making Snapmaker 2 A350 operations scriptable, this package is intended to provide a Go API for the Snapmaker 2 A350 machine.
$ git clone https://github.com/tinkerator/snappy.git
$ cd snappy
$ go build examples/snappy.go
In this directory, follow these instructions to generate your
snapmaker.config file. Preparation, under Linux, assumes you have
used Luban at least once to connect to your machine.
$ token=$(grep token ~/.config/snapmaker-luban/machine.json|tail -1|cut -d'"' -f4); \
address=$(grep address ~/.config/snapmaker-luban/machine.json|cut -d'"' -f4) \
; echo "{\"Address\":\"$address\", \"Token\":\"$token\"}" > snapmaker.config
Then try to run the command:
$ ./snappy --dump
For command line options:
$ ./snappy --help
Further details of this tool can be found in the
examples/ directory.
The Snapmaker uses a plain URL/FORM API with some attachments (for
running g-code programs) and offers JSON style return values. Learning
the command set has been via tcpdump-ing the exchange between Luban
and the Snapmaker 2.0 A350 device.
Some tcpdump commands to help navigate:
sudo tcpdump -w snap-$(date +%s).pcap -i eth0 port 8080
1743357727 with the
timestamp your command above generated):tcpdump -qns 0 -A -r snap-1743357727.pcap | less
tcpdump -qns 0 -A -r snap-1743357727.pcap | grep -E '(POST|GET)' | less
I have a selection of tool heads, but have only used a few of them. Eventually add support for them all.
The snappy package and examples are distributed with the same BSD
3-clause license as that used by
golang itself.
This is a hobby project. No support should be expected. However, if you want to suggest a feature, or if you find a bug, please use the github snappy bug tracker.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.