
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
django-ndr-core
Advanced tools
django-ndr-core is a mini CMS but most of all an access point to research data over apis. NDR Core helps you create a project website and present your data. It lets you create pages and add content to them. It also lets you create and manage your own data access points over different APIs and lets you configure how to present the data and how to make it searchable.
Open <project_name>/settings.py and add the ndr_core module and its dependencies to INSTALLED_APPS:
(Leave the existing settings in place).
import os
from ndr_core.ndr_settings import *
[...]
INSTALLED_APPS = [
[...]
]
INSTALLED_APPS += NdrSettings.get_installed_apps()
Open <project_name>/urls.py and add the ndr_core module and its dependencies to INSTALLED_APPS:
(Leave the existing settings in place).
from ndr_core.ndr_settings import NdrSettings
[...]
urlpatterns = [
[...]
]
urlpatterns += NdrSettings.get_urls()
After you have added the django-ndr-core module and its dependencies to your settings and urls, you can migrate your installation again to create the necessary database tables for your ndr-core installation.
python manage.py migrate
python manage.py collectstatic
python manage.py init_ndr_core
Run your server.
python manage.py runserver
Visit http://localhost:8000/ to view your website and http://localhost:8000/ndr_core/ to access the configuration interface. The last command runs your server on port 8000. This is not suitable for production use. You should use a webserver like nginx to serve your application. See the Documentation for more information.
FAQs
A Django app to search and view data from an API.
We found that django-ndr-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.