
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
attr-accept
Advanced tools
The attr-accept package is designed to provide functionality for checking if a file meets certain criteria specified through file attributes. This is particularly useful in scenarios where file uploads need to be validated based on file type, name, or other attributes before being processed or accepted. It's commonly used in web development projects to enhance the file upload feature by filtering out unacceptable files based on their attributes.
File Type Validation
This feature allows developers to validate the type of the file by specifying a MIME type pattern. In the code sample, the function `accepts` is used to check if a file named 'example.jpg' with the MIME type 'image/jpeg' matches the specified pattern 'image/*'. This is useful for ensuring that only files of a certain type are processed.
const accepts = require('attr-accept');
const file = {
name: 'example.jpg',
type: 'image/jpeg'
};
const accepted = accepts(file, 'image/*');
console.log(accepted); // true or false
File Extension Validation
This feature enables the validation of files based on their extension. The provided code demonstrates how to use the `accepts` function to verify if a file with the name 'example.pdf' and the type 'application/pdf' has a '.pdf' extension. This can be particularly useful for applications that only need to accept files with specific extensions.
const accepts = require('attr-accept');
const file = {
name: 'example.pdf',
type: 'application/pdf'
};
const accepted = accepts(file, '.pdf');
console.log(accepted); // true or false
The 'file-type' package is used to detect the file type of a Buffer/Uint8Array/ArrayBuffer. Unlike attr-accept, which matches files based on patterns or extensions provided by the developer, 'file-type' inspects the file content to determine its MIME type. This can be more reliable in cases where file extensions are incorrect or missing.
The 'mime-types' package allows for the lookup of MIME types based on file extensions and vice versa. While attr-accept is used for validating files against specific patterns or extensions, 'mime-types' is more focused on the association between file extensions and their corresponding MIME types, providing a way to retrieve one from the other.
JavaScript implementation of the "accept" attribute for HTML5
<input type="file">
See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/file#attr-accept for more information.
npm install --save attr-accept
var accept = require('attr-accept');
accept({
name: 'my file.png',
type: 'image/png'
}, 'image/*') // => true
accept({
name: 'my file.json',
type: 'application/json'
}, 'image/*') // => false
accept({
name: 'my file.srt',
type: ''
}, '.srt') // => true
You can also pass multiple mime types as a comma delimited string or array.
accept({
name: 'my file.json',
type: 'application/json'
}, 'application/json,video/*') // => true
accept({
name: 'my file.json',
type: 'application/json'
}, ['application/json', 'video/*']) // => true
Checkout the organization CONTRIBUTING.md.
FAQs
JavaScript implementation of the "accept" attribute for HTML5
The npm package attr-accept receives a total of 4,131,377 weekly downloads. As such, attr-accept popularity was classified as popular.
We found that attr-accept demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.