Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
地震前兆分析手段长期积弱,数据源是一个很大的原因,没有文件存储标准,数据库接入门槛也比较高。
为了突破数据源的壁垒,助力地震前兆科研发展,开发上线了该框架。
从地震系统的Oracle前兆数据库中提取数据,生成可视化图形,并无缝集成各种地球物理分析方法,以便实现自动化操作。
建议安装Anaconda或者Miniconda,Anaconda安装参考官网链接,Miniconda安装参考官网链接,入门建议安装Anaconda,不需要太多配置,开箱即用。
由于cx_Oracle在Windows系统下的安装需要Visual C++编译环境,配置起来比较复杂,建议先使用conda安装cx_Oracle,然后再安装addereq,安装命令如下:
conda install cx_Oracle
安装好Python环境后,执行以下命令安装addereq。
pip install addereq
下载以及安装参见 Oracle Instant Client 官网链接
需要将常用的数据库配置到default.conf
文件中,该文件可以存放在和脚本相同目录中,也可以存放在系统用户目录中,建议存放在系统用户目录中,目录需为~/.adder/default.conf
。
配置文件格式为:
[db1]
HOST = 192.168.181.12
PORT = 1521
USERNAME = test
PASSWORD = test
TNSNAME = pdbqz
建议将常用数据库全部配置进去,一劳永逸。
该模块为数据下载模块,可以提供快速批量的数据下载功能。
参数只需要输入default.conf
文件中配置的数据库名称即可。
from addereq import fetching as tsf
conn = tsf.conn_to_Oracle('db1')
from addereq import fetching as tsf
df = tsf.fetching_data(conn, '20230416', '20230416', '地电场', '北京', '分钟值', '原始库', gzip_flag=False)
该模块为批量绘图模块,提供类MapSIS的功能,可以批量绘制多个台站或者多个测向的曲线。df
变量中可以包含多个台站、多个测向的数据,可以一次性批量绘制,输出文件名自动生成。
from addereq import plotting as tsp
tsp.plot_by_stations(df, conn)
from addereq import plotting as tsp
tsp.plot_by_items(df, conn)
FAQs
We found that addereq demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.