
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
django-ca is a tool to manage TLS certificate authorities and easily issue and revoke certificates. It is
based cryptography <https://cryptography.io/>
_ and Django <https://www.djangoproject.com/>
_. It can be
used as an app in an existing Django project or stand-alone with the basic project included. Everything can be
managed via the command line via manage.py
commands - so no web server is needed, if you’re happy with the
command-line.
Features:
#. Set up a secure local certificate authority in just a few minutes. #. Certificate issuance via ACMEv2, REST API, command line or web interface. #. Certificate revocation via CRLs and OCSP. #. Private key storage on the file system, in the database or in a Hardware Security Module (HSM). #. Management via command line and/or via Django's admin interface. #. Get email notifications about certificates about to expire. #. Written in Python 3.9+, Django 4.2+ and cryptography 44+.
Please see https://django-ca.readthedocs.org for the most recent documentation.
FAQs
A Django app providing a TLS certificate authority.
We found that django-ca demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.