
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
akracer
Advanced tools
AKRacer 主要是解决 py_mini_racer 在 64 位 ARM 操作系统中的动态链接库调用问题,主要
方案就是通过 pip install akracer 使得在对应 py_mini_racer 目录中下载相应的已经
编译好的动态链接库,目前主要包括 armlibmini_racer.dylib 和 armlibmini_racer.glibc.so 这
两个动态链接库,分别对应 Apple M 系列芯片和 Ubuntu 18.04,20.04 和 22.04 及树莓派 64 位操作系统。
pip install akracer
需要在本地设置 PyPI 的环境变量
HATCH_INDEX_USER 为 __token__HATCH_INDEX_AUTH 为 pypi-xxxxSettings -> Tools -> Terminal -> Environment variables 中设置.pypirc 文件中,其中 pypi-xxxx 为对应的 token 是从 pypi 项目的设置中生成的主要修改 akracer/py_mini_racer/py_mini_racer.py 中的 _get_lib_path 函数,使得其可以
正常调用到对应的动态链接库。
akracer/py_mini_racer/__init__.py 中的 __version__ 更新到新版本akracer/dist 删除该文件夹,以删除老版本hatch buildhatch publish注意:第一次上传需要在 hatch publish -u __token__ -a pypi-xxxx 中配置好 token,参考
https://hatch.pypa.io/latest/publish/#authentication 其中的 pypi-xxxx 为对应的 token 是从
pypi 项目的设置中生成的。
本项目目标是解决 py_mini_racer 在 64 位操作系统中的动态链接库调用问题;
对应一览表
FAQs
akracer is next version of py_mini_racer
We found that akracer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.