
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
DASPy-toolbox
Advanced tools
DASPy is an open-source project dedicated to provide a python package for DAS (Distributed Acoustic Sensing) data processing, which comprises classic seismic data processing techniques and Specialized algorithms for DAS applications.
DASPy is an open-source project dedicated to provide a python package for DAS (Distributed Acoustic Sensing) data processing.
The goal of the DASPy project is to lower the bar of DAS data processing. DASPy includes:
DASPy is licensed under the MIT License. An English version of DASPy tutorial, a Chinese version of DASPy tutorial and an example of Jupyter notebook is available. If you have any questions, please contact me via hmz2018@mail.ustc.edu.cn.
DASPy runs on Linux, Windows and Mac OS and on Python 3.9 and up.
pip install daspy-toolbox
Install the latest version from GitHub:
pip install git+https://github.com/HMZ-03/DASPy.git
conda install daspy-toolbox
or
conda install conda-forge::daspy-toolbox
Install dependent packages: numpy, scipy >=1.13, matplotlib, geographiclib, pyproj, h5py, segyio, nptdms, tqdm
Add DASPy into your Python path.
from daspy import read
sec = read() # load example waveform
sec.bandpass(1, 15)
sec.plot()
Please see details on how to contribute to the project here and here.
https://doi.org/10.1785/0220240124.FAQs
DASPy is an open-source project dedicated to provide a python package for DAS (Distributed Acoustic Sensing) data processing, which comprises classic seismic data processing techniques and Specialized algorithms for DAS applications.
We found that DASPy-toolbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.