
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@jupyter-widgets/jupyterlab-manager
Advanced tools
A JupyterLab extension for Jupyter/IPython widgets. Since JupyterLab is in its pre-release stage, this package integrating widgets into JupyterLab should also be considered experimental.
Prerequisites
jupyter labextension install @jupyter-widgets/jupyterlab-manager
Use the appropriate command from the following list to install a compatible JupyterLab extension.
jupyter labextension install @jupyter-widgets/jupyterlab-manager@0.31
jupyter labextension install @jupyter-widgets/jupyterlab-manager@0.32
jupyter labextension install @jupyter-widgets/jupyterlab-manager@0.33
jupyter labextension install @jupyter-widgets/jupyterlab-manager@0.33
Prerequisites
git clone https://github.com/jupyter-widgets/ipywidgets.git
cd packages/jupyterlab-manager
npm install
npm run build
jupyter labextension link .
Rebuild
If you want to pull in changes to Jupyter widgets, run npm run build
at the ipywidgets repo root to update the version of Jupyter widgets in the node_modules directory and rebuild the JupyterLab extension.
FAQs
The JupyterLab extension providing Jupyter widgets.
The npm package @jupyter-widgets/jupyterlab-manager receives a total of 8,913 weekly downloads. As such, @jupyter-widgets/jupyterlab-manager popularity was classified as popular.
We found that @jupyter-widgets/jupyterlab-manager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.