
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Javascript library for parsing printed circuit board (PCB) files (e.g., Eagle *.brd)
Javascript library for parsing PCB file formats having rich metadata. Compatible with nodejs, jspcb can be used on the server or in the browser client in the context of automated pick-and-place (PnP). Supported PCB file formats:
To install jspcb command line wrapper and dependencies:
npm install -g jspcb
NOTE: The above requires that your user be able to write to /usr/local.
Convert XML Eagle BRD file such as the AdaFruit PCB ruler into its SVG equivalent
jspcb --eagle eagle/ruler.brd --svg /tmp/ruler.svg
To generate a CSV file of the SMD pads:
jspcb --eagle eagle/ruler.brd --csv-smdpads /tmp/pads.csv
Generate a FireSight and/or OpenCV PNG matching template from Gerber files using a jspcb JSON configuration file:
jspcb --json json/gerber-template.json
The jspcb
command line is just a wrapper around PcbTransform,
which does the actual transformation.
You can call PcbTransform directly with custom options.
Here is a local script to print out the bounding rectangle of a PCB:
const jspcb = require("jspcb"); var options = { eagle: { path: "eagle/ruler.brd", }, }; var pcbTrans = new jspcb.PcbTransform(options); console.log(pcbTrans.viewBounds());
The script does the same thing as:
jspcb --eagle eagle/ruler.brd --show-bounds
NOTE: The above script won't work in the Github jspcb
folder itself unless
you set your environment NODE_PATH property to the global or local node_modules
that has your jspcb installation. E.g.:
export NODE_PATH=node_modules
Do not use jspcb
as a library from within a Node.js web applications.
Node.js is single threaded, and you
will block your entire web application when reading in PCB files.
Instead, spawn a child process to perform your transformation.
Spawning a child process will allow Node.js to run unencumbered--your
web application will look for and
consume the asynchronously generated JSON file(s) as they appear.
FAQs
Javascript library for parsing printed circuit board (PCB) files (e.g., Eagle *.brd)
The npm package jspcb receives a total of 1 weekly downloads. As such, jspcb popularity was classified as not popular.
We found that jspcb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.