Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Does not implement the same interface, but rather the same premise.
Up to 100x faster than gumpy
pip install bio-grumpy
import grumpy
# Parse a genbank file
ref = grumpy.Genome("some/path/to/a/genbank/file.gbk")
# Parse a VCF file, respecting filter fails with a MIN_DP of 3 reads to make a call
vcf = grumpy.VCFFile("some/path/to/a/vcf/file.vcf", False, 3)
# Apply the VCF's mutations to the genome
sample = grumpy.mutate(ref, vcf)
# Get the genome level differences
genome_diff = grumpy.GenomeDifference(ref, sample)
for variant in genome_diff.variants:
print(variant.variant)
# And minor alleles
for variant in genome_diff.minor_variants:
print(variant.variant)
# Get gene level differences for all genes with mutations
for gene_name in sample.genes_with_mutations:
print(gene_name)
gene_diff = grumpy.GeneDifference(
ref.get_gene(gene_name),
sample.get_gene(gene_name),
grumpy.MinorType.COV,
)
for mutation in gene_diff.mutations:
print(mutation.mutation)
# And minor alleles
for mutation in gene_diff.minor_mutations:
print(mutation.mutation)
By default, VCF parsing will run with the same number of threads as CPU cores. This can give significant speed improvements for complex VCF files
To force single threading (or other number of threads), run grumpy.thread_setup(<thread count>)
. Note that should be run before any other function in this library, and should not be called more than once! Not following this will cause errors!
FAQs
gumpy re-implemented in Rust
We found that bio-grumpy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.