
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
The HackerLab 9000 controller library.
(Note: This project is unaffiliated with the Android Mod which goes by the name Hal9k
.)
This library is designed to provide the simplest possible API for controlling VirtualBox VMs, without any of the fancy stuff. There are only three actions we care about:
This functionality is similar to that of a basic music player, which provides a familiar metaphor. In the language of this library, a VM is a "Track," which you can "play," "rewind," or "stop."
The Meta controller can list and retrieve tracks.
>>> from hal9k import Meta
>>> # Instantiate a Meta controller.
>>> meta = Meta()
>>> # Retrieve a track listing.
>>> meta.get_tracks()
['Debian 9.12 x64', 'MSEdge - Win10', 'Kali 2020.2 x64']
>>> # Instantiate a Track controller.
>>> track = meta.fetch('Debian 9.12 x64')
>>> # Start the track.
>>> track.play()
>>> # Check that it's running.
>>> track.status()
1
>>> # Stop the track.
>>> track.stop()
>>> # Check that it's stopped.
>>> track.status()
0
>>> # Rewind the track.
>>> track.rewind()
The Meta.get_tracks
function returns a list of the names of all VMs which have a PRODUCTION
snapshot defined. The Track.rewind
function restores the track's PRODUCTION
snapshot. There can be only one PRODUCTION
shapshot for each VM. If you decide to make a new PRODUCTION
snapshot, be sure to delete the one previous. Any VMs lacking a PRODUCTION
snapshot will be invisible to hal9k
.
A hal9k.track.TrackException
exception will be raised for Track.play
and Track.rewind
if the track is already playing. Likewise for Track.stop
if the track is already stopped. Tracks must be stopped before using Track.play
or Track.rewind
, and tracks must be playing before using Track.stop
.
hal9k.track.TrackException
error handling.Meta.get_tracks
function to list only production-ready VMs.rewind
function to Track
class.status
function to Track
class.stop
function to Track
class.Track
class with play
function.fetch
function to Meta
class.Meta
class with get_tracks
function.FAQs
The HackerLab 9000 Controller Library.
We found that Lib-HaL9k demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.