Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Lightweight bluesky-as-a-service wrapper application. Also usable as a library.
Source | https://github.com/DiamondLightSource/blueapi |
---|---|
PyPI | pip install blueapi |
Docker | docker run ghcr.io/diamondlightsource/blueapi:latest |
Documentation | https://diamondlightsource.github.io/blueapi |
Releases | https://github.com/DiamondLightSource/blueapi/releases |
This module wraps bluesky plans and devices inside a server and exposes endpoints to send commands/receive data. Useful for installation at labs where multiple people may control equipment, possibly from remote locations.
The main premise of blueapi is to minimize the boilerplate required to get plans and devices up and running by generating an API for your lab out of type-annotated plans. For example, take the following plan:
import bluesky.plans as bp
from blueapi.core import MsgGenerator
def my_plan(foo: str, bar: int) -> MsgGenerator:
yield from bp.scan(...)
Blueapi's job is to detect this plan and automatically add it to the lab's API so it can be invoked easily with a few REST calls.
See https://diamondlightsource.github.io/blueapi for more detailed documentation.
FAQs
Lightweight bluesky-as-a-service wrapper application. Also usable as a library.
We found that blueapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.