
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Python toolbox of Ambient Digital containing an abundance of useful tools and gadgets.
Python toolbox of Ambient Digital containing an abundance of useful tools and gadgets.
This package was previously known as ai_django_core. Due to the misleading nature of the name, we chose to rename it with something more meaningful.
The migration is really simple, just:
from ai_django_core...
to from ambient_toolbox...
Install the package via pip:
pip install ambient-toolbox
or via pipenv:
pipenv install ambient-toolbox
Add module to INSTALLED_APPS
within the main django settings.py
:
INSTALLED_APPS = (
# ...
"ambient_toolbox",
)
Apply migrations by running:
python ./manage.py migrate
Update documentation about new/changed functionality
Update the Changelog
Increment version in main __init__.py
Create pull request / merge to master
This project uses the flit package to publish to PyPI. Thus, publishing should be as easy as running:
flit publish
To publish to TestPyPI use the following to ensure that you have set up your .pypirc as shown here and use the following command:
flit publish --repository testpypi
Please note that this package supports the ambient-package-update.
So you don't have to worry about the maintenance of this package. This updater is rendering all important
configuration and setup files. It works similar to well-known updaters like pyupgrade
or django-upgrade
.
To run an update, refer to the documentation page of the "ambient-package-update".
FAQs
Python toolbox of Ambient Digital containing an abundance of useful tools and gadgets.
We found that ambient-toolbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.