
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
aiconfig-extension-hugging-face
Advanced tools
An extension for using Hugging Face tasks to parse models for AIConfig.
This extension contains AIConfig model parsers with two main subfolders:
local_inference
: Loads models onto your machine and uses Hugging Face transformers and diffusors locally.remote_inference_client
: Uses Hugging Face's InferenceClient API to connect to models remotelyIf you are not testing and developing locally (just using the published extension), ignore this and go to Part 2
aiconfig/extensions/HuggingFace
, run this command: pip3 install build && cd python && python -m build && pip3 install dist/*.whl
pip3 install -e .
. Afterwards if you do pip3 list | grep aiconfig
, you should see this linked to your local path. If you ever wish to use the published extension, you will need to first remove the extension: pip3 uninstall aiconfig-extension-hugging-face && pip3 install aiconfig-extension-hugging-face
aiconfig/HuggingFace
dir. It'll probably look something like python/dist
and python/<package_name>.egg-info
pip3 install aiconfig-extension-hugging-face
from aiconfig_extension_hugging_face import <EXTENSION>
.from aiconfig import ModelRegistryParser
ModelParserRegistry.register_model_parser(HuggingFaceTextGenerationTransformer())
. You can read the docstrings under ModelParserRegistry
class for more infomodel_parsers
with the model you want to use and the id of the extension you want to use: . Ex: https://github.com/lastmile-ai/aiconfig/blob/f1840995b7a12acba371a59ac3b8c69b3962fc68/cookbooks/Getting-Started/travel.aiconfig.json#L19-L22aiconfig.run()
these model parsers will be loaded and available!FAQs
An extension for using Hugging Face tasks to parse models for AIConfig.
We found that aiconfig-extension-hugging-face demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.