Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
bio_check
API:The primary method of user-facing interaction for this service is done through the use of a high-level "notebook" api called bio_check
.
A convenient notebook demonstrating the functionality of this service is hosted on Google Colab and can be accessed by clicking the above "Open In Colab" badge.
View the template notebook as an image
Installation of this tooling can be performed using PyPI as such:
pip install bio-check
PLEASE NOTE: You must have >=python3.9
in order to use the high-level api.
This application (bio_check
) uses a microservices architecture which presents the following libraries:
api
: This library handles all requests including saving uploaded files, pending job creation, fetching results, and contains the user-facing endpoints.storage
: This library handles MongoDB configs as well as bucket-like storages for uploaded files.worker
: This library handles all job processing tasks for verification services such as job status adjustment, job retrieval, and comparison execution.The installation process is outlined as follows:
git clone https://github.com/biosimulators/bio-check.git
cd bio-check/bio_check
touch .env
Enter the following fields into the .env
file:
MONGO_URI=<uri of your mongo instance. In this case we use the standard mongodb image with the app name bio-check>
GOOGLE_APPLICATION_CREDENTIALS=<path to your gcloud credentials .json file. Contact us for access>
BUCKET_NAME=bio-check-requests-1 # name of the bucket used in this app
Ensure that your IP address has been authorized in the bio-check
cluster within Mongo Atlas.
api
and worker
libraries. Such database access is
executed/implemented with the use of a Supervisor
singleton.The only package source that is currently supported by this tooling is PyPI
. The support of other potential
package sources such as conda
, brew
, apt
, and more is currently under development.
FAQs
Simulation Verification Service and API
We found that bio-check demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.