
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
NFX.MongoDB Provider Package NFX UNISTACK includes: Application Container + Dependency Injection facilities Configuration engine BigMemory: Local/Distributed piles/heaps, ability to store hundreds of millions of objects resident in memory for long times without killing GC BigMemory Cache - store hudreds of millions of objects in RAM without GC pressure (full GC scan <20ms @ 300M+ objects 64 Gb taken) Logging with 8+ destinations/sinks(text, email, flood filter etc.) Distributed contact-oriented communication framework NFX.Glue (replaces WCF) Security with users, credentials, roles, permissions JSON parsing, ser/deser support Ultra efficient Binary serialization support Erlang CLR support with native types: tuples, lists, pattern matching Text lexing/parsing and processing pipeline: C# lexer, JSON lexer/Parser RelationalSchema language compiler - generate DDL for different targets Templatization engine (for web, emails and not only textual content) NFX.WAVE - Web Server with hybrid injectable threading model (replaces IIS + ASP.NET) NFX.WAVE.Mvc - MVC framework for web pages WV.js - a web component library auto-bindable to server MVC/MVVM Database access layer with virtual commands/queries/transactions ID generation - GlobalDistributed IDS (GDID), FID - fast process-wide ID Virtual Social Network - Twitter/Facebook/Google+ et al Virtual Payment Processing - Stripe,PayPal providers Virtual File Systems - AmazonS3, SVN, Local QR Code Creation In progress: Virtual document model with rendering to PDF, HTML and other formats In Progress: PDF DOM model + rendering
FAQs
NFX.MongoDB Provider Package NFX UNISTACK includes: Application Container + Dependency Injection facilities Configuration engine BigMemory: Local/Distributed piles/heaps, ability to store hundreds of millions of objects resident in memory for long times without killing GC BigMemory Cache - store hudreds of millions of objects in RAM without GC pressure (full GC scan <20ms @ 300M+ objects 64 Gb taken) Logging with 8+ destinations/sinks(text, email, flood filter etc.) Distributed contact-oriented communication framework NFX.Glue (replaces WCF) Security with users, credentials, roles, permissions JSON parsing, ser/deser support Ultra efficient Binary serialization support Erlang CLR support with native types: tuples, lists, pattern matching Text lexing/parsing and processing pipeline: C# lexer, JSON lexer/Parser RelationalSchema language compiler - generate DDL for different targets Templatization engine (for web, emails and not only textual content) NFX.WAVE - Web Server with hybrid injectable threading model (replaces IIS + ASP.NET) NFX.WAVE.Mvc - MVC framework for web pages WV.js - a web component library auto-bindable to server MVC/MVVM Database access layer with virtual commands/queries/transactions ID generation - GlobalDistributed IDS (GDID), FID - fast process-wide ID Virtual Social Network - Twitter/Facebook/Google+ et al Virtual Payment Processing - Stripe,PayPal providers Virtual File Systems - AmazonS3, SVN, Local QR Code Creation In progress: Virtual document model with rendering to PDF, HTML and other formats In Progress: PDF DOM model + rendering
We found that nfx.mongodb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.