
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
.. image:: https://travis-ci.org/Fatal1ty/aiofcm.svg?branch=master :target: https://travis-ci.org/Fatal1ty/aiofcm
.. image:: https://img.shields.io/pypi/v/aiofcm.svg :target: https://pypi.python.org/pypi/aiofcm
.. image:: https://img.shields.io/pypi/pyversions/aiofcm.svg :target: https://pypi.python.org/pypi/aiofcm/
.. image:: https://img.shields.io/badge/License-Apache%202.0-blue.svg :target: https://opensource.org/licenses/Apache-2.0
aiofcm is a library designed specifically for sending messages such as push-notifications
to Android devices via Firebase Cloud Messaging platform. aiofcm provides an efficient client
through asynchronous XMPP protocol for use with Python's asyncio
framework.
aiofcm requires Python 3.5 or later.
In my testing aiofcm allows you to send on average 1k messages per second on a single core.
Use pip to install::
$ pip install aiofcm
.. code-block:: python
from uuid import uuid4
from aiofcm import FCM, Message, PRIORITY_HIGH
async def run():
fcm = FCM(123456789000, '<API_KEY>')
message = Message(
device_token='<DEVICE_TOKEN>',
notification={ # optional
"title": "Hello from Firebase",
"body": "This is notification",
"sound": "default"
},
data={"score": "3x1"}, # optional
message_id=str(uuid4()), # optional
time_to_live=3, # optional
priority=PRIORITY_HIGH, # optional
)
await fcm.send_message(message)
loop = asyncio.get_event_loop()
loop.run_until_complete(run())
aiofcm is developed and distributed under the Apache 2.0 license.
FAQs
An efficient Firebase Cloud Messaging Client Library for Python/asyncio
We found that aiofcm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.