
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
clockblocks
Advanced tools
clockblocks is a python library for controlling the flow of time, designed with musical applications in mind. In particular, it is a central component of scamp, a Suite for Computer-Assisted Music in Python. It is described in detail in this paper.
A Clock acts like thread, but with the advantage that when multiple clocks are coordinated under the same master clock they remain precisely coordinated and do not experience drift. Furthermore, processing time is taken into account when "wait" is called in a given Clock. For example, the following program:
import clockblocks
import time
import math
clock = clockblocks.Clock()
start = time.time()
while True:
print("Current time: {}".format(round(time.time() - start, 4)))
# do some pointless and time-consuming calculations
for i in range(1000000):
math.log((i+1)**0.7)
clock.wait(2)
... generates the output:
Current time: 0.0
Current time: 2.0001
Current time: 4.0001
Current time: 6.0
Current time: 8.0001
Current time: 10.0
Whereas a traditional thread:
import time
import math
start = time.time()
while True:
print("Current time: {}".format(round(time.time() - start, 4)))
# do some pointless and time-consuming calculations
for i in range(1000000):
math.log((i+1)**0.7)
time.sleep(2)
...will gradually drift because of the intensive calculations, outputting:
Current time: 0.0
Current time: 2.3772
Current time: 4.7623
Current time: 7.1397
Current time: 9.5151
Current time: 11.893
In addition, clockblocks offers useful musical functionality, like sudden and gradual changes of tempo. Perhaps the most exciting feature of clockblocks is that clocks moving at different tempos can be nested within each other. In this case, each clock distorts time for those underneath it: a clock whose tempo is oscillating between slow and fast, nested within a clock that is accelerating, will generate a time stream whose tempo oscillates faster and faster.
FAQs
A python library for controlling the flow of musical time..
We found that clockblocks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.