Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
W.I.P. Azure stuff to make my life easier.
pip install azure-extras
Copy azure.example.ini to $HOME/.azure.ini
, adding
your subscription and tenant details along the way.
This location can be customised with the --config
flag at runtime.
TODO: Use Azure CLI credentials
https://github.com/projectkudu/kudu
usage: az-kudu [-h] [-a NAME] [-C PATH] [-r NAME]
(-c COMMAND | -e SLUG | -z PATH | -Z SOURCE DESTINATION)
[-p PATH] [-v]
CLI Kudu API Frontend
optional arguments:
-h, --help show this help message and exit
-a NAME, --app NAME azure app service name
-C PATH, --config PATH
path to azure configuration file
-r NAME, --rg NAME azure resource group
-c COMMAND, --cmd COMMAND
command to run (use quotes for multi-word commands)
-e SLUG, --endpoint SLUG
api endpoint slug
-z PATH, --deploy_zip PATH
upload a zip to the server
-Z SOURCE DESTINATION, --download_zip SOURCE DESTINATION
download a zip of a remote path
-p PATH, --cwd PATH server current working directory
-v increase verbosity
Workaround until this is implemented in terraform
usage: az-chkhealth [-h] [-a NAME [NAME ...]] [-r NAME] [-A ENABLE/DISABLE]
[-C PATH] [-v]
Enable or disable Health Check in Azure App Services
optional arguments:
-h, --help show this help message and exit
-a NAME [NAME ...], --app_services NAME [NAME ...]
list of azure app services
-r NAME, --resource_group NAME
azure resource group
-A ENABLE/DISABLE, --action ENABLE/DISABLE
action to carry out - enable or disable.
-C PATH, --config PATH
path to azure configuration file
-v increase verbosity
usage: az-asctl [-h] [-a NAME [NAME ...]] [-r NAME] [-A START/STOP] [-C PATH]
[-v]
Start or stop Azure App Services and their slots
optional arguments:
-h, --help show this help message and exit
-a NAME [NAME ...], --app_services NAME [NAME ...]
list of azure app services
-r NAME, --resource_group NAME
azure resource group
-A START/STOP, --action START/STOP
action to carry out - enable or disable.
-C PATH, --config PATH
path to azure configuration file
-v increase verbosity
usage: az-sajctl [-h] [-C PATH] [-r NAME] [-j JOBS [JOBS ...]] [-a START/STOP]
[-v]
Start or stop Stream Analytics Jobs
optional arguments:
-h, --help show this help message and exit
-C PATH, --config PATH
path to azure configuration file
-r NAME, --resource_group NAME
azure resource group
-j JOBS [JOBS ...], --stream_analytics_jobs JOBS [JOBS ...]
list of azure stream analytics jobs
-a START/STOP, --action START/STOP
action to carry out - start or stop.
-v increase verbosity
FAQs
The stuff Microsoft left out..
We found that azure-extras demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.