Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This command-line interface (CLI) application is used to interact with the OpenAI through the OpenAI API. The chatbot takes an input prompt and returns a response from the selected model.
Ensure you have Python 3.7+ installed. To install the required libraries, use:
pip install aish
To use the application, you need to set the environment variable OPENAI_API_KEY
with your OpenAI API key. Then, you can run the script from the terminal using the command:
aish How can i list all files older than 30 days?
aish -s How can i list all files older than 30 days?
aish -c code Write a hello world app in python
Optional parameters will take default values if not provided:
ModelVersion
: The model version that you want to use. Default is "gpt-3.5-turbo".TemperatureValue
: The randomness of the AI’s responses. A lower value makes the output more focused and deterministic, while higher values produce more diverse and random outputs. Default is 0.5.TopPValue
: A parameter for controlling randomness. A higher value generates more random responses, and a lower value generates more deterministic responses. Default is 0.5.TimeoutValue
: The maximum time in seconds that the request will wait for a response from the API. Default is 60.You can display the help message which provides details about the command usage and the different parameters by running:
aish --help
FAQs
A command-line application that interacts with the OpenAI ChatGPT API.
We found that aish demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.