Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
This is a data transformer plugin for Altair that transparently serves data for Altair charts via a background WSGI server.
Note that charts will only render as long as your Python session is active.
The data server is a good option when you'll be generating multiple charts as part of an exploration of data.
First install the package and its dependencies:
$ pip install altair_data_server
Next import altair and enable the data server:
import altair as alt
alt.data_transformers.enable('data_server')
Now when you create an Altair chart, the data will be served in the background rather than embedded in the chart specification.
Once you are finished with exploration and want to generate charts that will have their data fully embedded in the notebook, you can restore the default data transformer:
alt.data_transformers.enable('default')
and carry on from there.
Remotely-hosted notebooks (like JupyterHub or Binder) usually do not allow the end user to access arbitrary ports. To enable users to work on that setup, make sure jupyter-server-proxy is installed on the jupyter server, and use the proxied data server transformer:
alt.data_transformers.enable('data_server_proxied')
You can see this in action, as well as read some of the motivation for this plugin, in the example notebook: AltairDataServer.ipynb. Click the Binder or Colab links above to try it out in your browser.
Because jupyter-server-proxy requires at least Python 3.5, the methods described in Remote Systems do not work do not work for older versions of Python.
FAQs
A background data server for Altair charts.
We found that altair-data-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.