
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A small clone of [1024](https://play.google.com/store/apps/details?id=com.veewo.a1024), based on [Saming's 2048](http://saming.fr/p/2048/) (also a clone).
A small clone of 1024, based on Saming's 2048 (also a clone).
Made just for fun. Play it here!
The official app can also be found on the Play Store and App Store!
Anna Harren and sigod are maintainers for this repository.
Other notable contributors:
Many thanks to rayhaanj, Mechazawa, grant, remram44 and ghoullier for the many other good contributions.
That screenshot is fake, by the way. I never reached 2048 :smile:
Changes and improvements are more than welcome! Feel free to fork and open a pull request. Please make your changes in a specific branch and request to pull into master
! If you can, please make sure the game fully works before sending the PR, as that will help speed up the process.
You can find the same information in the contributing guide.
2048 is licensed under the MIT license.
I made this in my spare time, and it's hosted on GitHub (which means I don't have any hosting costs), but if you enjoyed the game and feel like buying me coffee, you can donate at my BTC address: 1Ec6onfsQmoP9kkL3zkpB6c5sA4PVcXU2i
. Thank you very much!
FAQs
A small clone of [1024](https://play.google.com/store/apps/details?id=com.veewo.a1024), based on [Saming's 2048](http://saming.fr/p/2048/) (also a clone).
The npm package 2048-html receives a total of 684 weekly downloads. As such, 2048-html popularity was classified as not popular.
We found that 2048-html demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.