Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A set of resources and tools to help developers create packages for the Area28 application.
The A28 Developer Toolkit provides developers with the tools and documentation necessary to build packages for the Area28 Application and to manage configuration files.
Area28 follows the VFX Reference Platform which restricts Python to 3.7.x currently.
The A28 Development Kit is published on PyPI and can be installed from there:
pip install -U a28
We also publish beta releases:
pip install -U --pre a28
If you wish to install A28 for development purposes, refer to the contributors guide.
Documentation is available on GitHub.
Report bugs, suggest features or view the source code on GitHub.
Plugins are decorators that can be used to manipulate the payload before being processed or before getting returned.
Extension are used to add additional functionality to the Area28 application. Extensions are broken up into multiple types, defined within the Interfaces list.
Each package has a unique identifier associated with it and is compressed into a .a28 file. Please look at the a28 development kit for details.
@{provider}
|-- {package}
|-- extensions
| |-- {extensions[]}.py
|-- scripts
| |-- install.py
| |-- postinstall.py
| |-- preinstall.py
| |-- uninstall.py
|-- plugin
| |-- {application specific plugin}
|-- plugins
| |-- {plugin[]}.py
|-- bin
| |--{executable[]}.py
|-- package.json
{
"name": "@area28/unity-application",
"version": "0.0.4",
"description": "Detect is running within Unity3D.",
"homepage": "https://area28.io",
"keywords": [
"area28",
"chat",
"lowercase",
"transform"
],
"repository": {
"type": "git",
"url": "git+https://github.com/area28/area28.git",
"directory": "packages/unity-application"
},
"author": "Area28 Technologies",
"license": "MIT",
"bugs": {
"url": "https://github.com/area28/area28/issues"
},
"bin": {
"myapp": "./bin/lowercase.py"
},
"os": [
"darwin",
"linux"
],
"cpu": [
"x64",
"ia32",
"!mips"
],
"scripts": {
"preinstall": "scripts/preinstall.py",
"install": "scripts/install.py",
"postinstall": "scripts/postinstall.py",
"uninstall": "scripts/uninstall.py"
}
}
a28 account authenticate -u my.email@example.com
a28 package init --scope my-company --name powerful-plugin --type app my/folder
This will generate a package.json
and the folder structure in the given folder ('my/folder')
a28 package build --src @area28/chat-logger --dest dist
This will generate the .a28
package in dist/
a28 package install --pkg dist/00000000-0000-0000-0000-00000000-0.0.1.a28
a28 package publish --pkg dist/00000000-0000-0000-0000-00000000-0.0.1.a28
FAQs
A set of resources and tools to help developers create packages for the Area28 application.
We found that a28 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.