
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
The graphics framework used by CMU CS Academy, geared toward beginner CS students.
Desktop CMU Graphics is an offline version of CMU Graphics, a persistent-object graphics package geared towards beginner computer science students. CMU Graphics and its desktop version are maintained by CMU CS Academy, a Carnegie Mellon University project which develops free-to-use middle and high school computer science curriculum.
Desktop CMU Graphics works with Python 3.6-3.11 and is compatible with Replit (see the "Replit" section below). This package, including its documentation, is licensed under the BSD 3-Clause license.
There are two different ways to install Desktop CMU Graphics on a device:
Both methods come with their own advantages and limitations. If you're in doubt about which to choose, the zip file installer is the most likely to succeed. It should work regardless of most restrictions in place on school-distributed devices.
For those using devices with Linux operating systems, or for those who are familiar with the command line/terminal, the pip version of the package offers a larger degree of versatility.
The remainder of these installation instructions are only for the pip version.
If you're using Windows, you don't need to install any dependencies. Skip ahead to "Install CMU Graphics" below.
If you're using a Mac, install Homebrew.
If you're using a Mac or Linux, install the software packages needed by pycairo. Read their getting started page for instructions.
Run the following command:
pip install cmu-graphics
To run our graphics framework, include the following line at the top of your Python file:
from cmu_graphics import *
At the end of your Python file, add this line:
cmu_graphics.run()
From there, the syntax for using the graphics package is identical to the online version of the framework. You can find more details about how to use the graphics framework here on our documentation page.
If you are a teacher with a CMU CS Academy Account and you have questions about CMU Graphics, remember that you can reach out to us through the Support tab on the left side of the CMU CS Academy website:
If you are an educator but do not have an account with CMU CS Academy, you can register for an account here.
If you are a student, or you are exploring Desktop CMU Graphics, there are plenty of resources to help you get started with the framework. Students can reach out to their teachers for questions about CMU Graphics, and a full reference documentation for the graphics framework is available on our documentation page.
Desktop CMU Graphics is compatible with Replit. To use the package on the Replit website:
FAQs
The graphics framework used by CMU CS Academy, geared toward beginner CS students.
We found that cmu-graphics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.