Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
astroHack (Holography Antenna Commissioning Kit) is a Python package under development by NRAO's CASA team to support holography and antenna position correction measurements. It currently supports pointed and on-the-fly holographies for both ALMA and the VLA as well as antenna position corrections for the VLA. The future goal of astrohack is to support the commissioning of the Next Generation Very Large Array (ngVLA). Much of the core functionality of astroHACK is inspired by the code of the following AIPS tasks: UVHOL, HOLOG and PANEL for holography and LOCIT for the antenna position corrections. AstroHACK enables parallel execution by using Dask and efficient single-threaded performance by making use of Numba.
📝 astroHACK is under active development! Breaking API changes are still happening on a regular basis, so proceed with caution.
It is recommended to use the conda environment manager to create a clean, self-contained runtime where astrohack and all its dependencies can be installed:
conda create --name astrohack python=3.11 --no-default-packages
conda activate astrohack
📝 On macOS it is required to pre-install
python-casacore
usingconda install -c conda-forge python-casacore
.
Making astroHACK available for download from conda-forge directly is pending, so until then the current recommendation is to sully that pristine environment by calling pip from within conda, like this:
pip install astrohack
Besides the API for the user facing functions there are three tutorials that can be followed that demonstrate the capabilities of astrohack:
FAQs
Holography Antenna Commissioning Kit
We found that astrohack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.