Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
An inventory audit tool for speeding up inventory and avoiding errors that occur during processing. This tool will allow users to complete inventory counts with a simple workflow that remedies user error.
$ pypi install audit-tools
from audit_tools.sessionmanager import SessionManager
with SessionManager() as session: # invokes the session manager
session.import_data("/path/to/file.xlsx") # imports data from an excel, json or csv file
session.count_product('F7X6A7', 20) # Counts 20 F7X6A7's to the inventory
session.increase_product('F7X6A7', 10) # Increases F7X6A7 to 30 in the inventory
session.reduce_product('F7X6A7', 3) # Reduces F7X6A7 to 27 in the inventory
print(session.get_product('F7X6A7')) # Returns the row of product with SKU 'F7X6A7'
session.parse_session_data() # Updates session dataframes with accurate content
The session manager is the main class that manages the session. It is responsible for importing data,
counting products, and updating the session dataframes. It will take products when SessionManager()
is
called or when the import_data()
method is called.
Testing - will make sure that there is no output file
from audit_tools.sessionmanager import SessionManager
with SessionManager('/path/to/file.xlsx', testing=True) as session:
session.import_data('/path/to/file.xlsx')
Not working on it, do not use just there for testing and proof of concept
from audit_tools.sessionmanager import SessionManager
from audit_tools.core.utils.scanner import Scanner
with SessionManager('/path/to/file.xlsx') as session:
# Usage of the scanner is discouraged as it is not thread safe or efficient
# Scanner is mostly for testing purposes
# I do not update the code often in the scanner
scanner = Scanner(session) # Creates a scanner object
scanner.start_count() # Starts the count process
scanner.shutdown() # processes and saves session data to disk
All the problems that we encounter while processing inventory data during an audit.
Our ideas for solution implementations for fixing these problems so that an Audit can be completed successfully with accuracy and speed.
This list will include all the features, current and future.
Features | Working Status |
---|---|
Session Manager | Working* |
Scan & Count | In Development |
Scan & Edit | Planned |
Receipt Parser | Planned |
Dev notes: If you come across this project, I am a newish developer, and I am not familiar with the python ecosystem especially poetry. If you are confused on the namings in this project, keep in mind this package was created for a sole reason to help the creator at work, and will be used in tandem with a handheld scanner.
FAQs
Auditing tools for Cova POS files
We found that audit-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.