
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
SERVICE OBJECTS, INC.
Service: Nuget Package for DOTS Phone Append 2
Operation: PhoneAppend
Description: This package installs the DOTSPhoneAppend2.dll and its dependancies. This library wraps up the API calls to our DOTS Phone Append 2 web service into best practices enforcing the highest uptime solution by implementing failover.
IMPLEMENTATION DETAILS: See the following sections - Standard Implementation
Note: The code being suggested in this file provides one possible solution using this particular service. There are many other possible solutions to using this service which may fit a particular problem . Please contact support@serviceobjects.com for more information.
Date Created: 7/26/2016 Last Modified: 11/10/2021
Modified by: D. Van Lant
WEBSITE http://www.serviceobjects.com
https://www.serviceobjects.com/products/phone/phone-append
DEVELOPERS GUIDE https://docs.serviceobjects.com/display/devguide/DOTS+Phone+Append+2
FREE TRIAL http://www.serviceobjects.com/dots-key?wsid=69
SUPPORT EMAIL support@serviceobjects.com
THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.
STANDARD IMPLEMENTATION
Step 1. Get the license key
When the package is installed all the endpoints to the service are added to your Web.config file. There is also an appSetting added in that file as well:
<add key="PA2LicenseKey" value="wsXX-XXXX-XXXX"/>
You will need to replace the value attribute with a real trial or live key from Service Objects. A trial key can be obtained from:
http://www.serviceobjects.com/dots-key?wsid=69
In your code behind page you will want to pull the key from your Web.config file with a call like this:
string LicenseKey = ConfigurationManager.AppSettings["PA2LicenseKey"];
Step 2. Make the API call
Gather your inout vaiables and use them as parameters in the line below to make thew call to the API operation:
DOTSPhoneAppend2.PA2Service.PhoneInfoResponse response = DOTSPhoneAppend2.PA2Service.PhoneAppend([FullName], [FirstName], [LastName], [Address], [City], [State], [PostalCode], [LicenseKey], [IsLive]);
Replace the parameter values in the square brackets above with your respective input values.
Step 3. Process the Response
Details about what you get back in the response can be found in the developers guide. The link for the guide is given above.
Find the section on the operation "PhoneAppend". This is the operation this call makes and is the recommended operation for this service. See the developers guide for more information on the types of values that the services return.
FAQs
Unknown package
We found that dotsphoneappend2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.