
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
django-cookie-control
Advanced tools
A Django plugin to integrate the Civic UK Cookie Control (https://www.civicuk.com/cookie-control)
The plugin is compatible with Django, DjangoCMS and Django/CMS multisite.
Install the application via pip:
pip install django-cookie-control
Add 'django_cookie_control' to installed apps:
INSTALLED_APPS = [ ... 'django_cookie_control', ...]
Add/Edit the following to settings.py
if required with required cookies:
# DEFAULT if missing:
COOKIE_CONTROL_REQUIRED_COOKIES = ['csrftoken','django_language','sessionid','django_privacy_mgmt_preferences','AWSALB']
Run or make migrations:
python.exe manage.py migrate
For a full list of configuration settings see the Civic UK site, here:
https://www.civicuk.com/cookie-control/documentation
Plugin configuration overview:
Add a new configuration:
Configure Main Settings:
Settings:
https://www.civicuk.com/cookie-control/documentation#configuration-options
IAB/CCPA Frameworks:
https://www.civicuk.com/cookie-control/documentation#iab
Appearance and Behaviour:
https://www.civicuk.com/cookie-control/documentation#customising
Accessibility:
https://www.civicuk.com/cookie-control/documentation#accessibility-object
Cookies:
https://www.civicuk.com/cookie-control/documentation#purpose-object
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.