Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Botterino allows automation of hosting and posting of /r/picturegame coordinates rounds
When running botterino, if you win a round, your round will automatically be posted. It will reply with 'x' or '+correct' to any comments on your round automatically, with configurable tolerances.
C:\Users\your username\botterino-config
/Users/<your username/botterino-config
~/botterino-config
These files are created for you the first time you run the botpip install botterino
botterino-config/praw.ini
; see sample-praw.ini
(on github) for an example
http://localhost:8080
(This is irrelevant unless OAuth2 is used,but it's a required field)client_secret
in botterino-config/praw.iniclient_id
in praw.iniuser_agent
python -m botterino
python -m botterino.ui
Rounds are kept in the 'rounds/rounds.yaml' file, see 'sample.yaml' for some examples
python -m botterino
Any new rounds added to 'botterino-config/rounds/rounds.yaml' while the app is running will automatically be added to the queue, no need to restart. Once a round is complete, it will be moved to 'botterino-config/rounds/archive.yaml'.
Botterino can be used on a round that is already live
This is useful for cases where
url
field should be omittedpython -m botterino.failure
Botterino can schedule hints and post them automatically.
The file botterino-config/hints.yaml
will be scanned for entries with the same key
as the corresponding entry in botterino-config/rounds.yaml
. See sample-hints.yaml
for syntax.
Options such as correct message and incorrect message can be customized in botterino-config/config.ini
Update this botterino with
pip install --upgrade botterino
This botterino uses colorful output. If you see strange output like this on windows then download Windows terminal from the Microsoft store.
FAQs
Automate posting and hosting of rounds on /r/picturegame
We found that botterino demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.