
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Creates a simple package structure, Fire, git, PyPI, bumpversion, pytest and configfile ready
To create a new python project is a bit tedious task, especially if one doesn't know how to.
This purpose of this package is to make a simple, but still functional project structure.
pip3 install codeframe
Try just:
codeframe myproject myunit
This will create:
myproject
and inside:bin/myproject
named bin_myproject
,myunit
, that is soft-linked as test_myunit
, so it works
with pytest
,version.py
, that works with bumpversion
myproject
, that contains softlinks to ../
so
that the package structure workssetup.py
file, where you need to fill the requirements list and
other thingsREADME.org
, that will generate README.md
when ./distcheck
is
runconfig
module it creates a new config DIR
~/.config/myproject
jupyter
that is opened in the
myproj
directory.bin_myproject
make the script inside bin/
callable
(but git pull from elsewhere looses the hardlink!)pip3 install -e .
config
module can be both - used at a new project and imported
from any project from codeframe import config
README.md
Thanks to Fire
, each module can be developed separately and CLI can be
finally tuned in bin/myproject
(hard-linked to bin_myproject
) file.
FAQs
Automatically created environment for python package
We found that codeframe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.