Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This drb-impl-ftp module implements ftp protocol access with DRB data model.
The module implements the factory model defined in DRB in its node resolver. Based on the python entry point mechanism, this module can be dynamically imported into applications.
The entry point group reference is drb.impl
.
The implementation name is ftp
.
The factory class is encoded into drb_impl_ftp.drb_impl_ftp
.
The ftp signature id is d61c923a-5f1b-11ec-bf63-0242ac130002
The Ftp can be instantiated from an uri. The ParsedPath
class provided in drb core module can help to manage these inputs.
The project is present in https://www.pypi.org service. it can be freely loaded into projects with the following command line:
pip install drb-impl-ftp
DrbFtpNode
manages the ftp protocol to access remote data. The construction
parameter is an url with the host and an authentication object. Both FTP and FTPS are supported. They allow access the
ftp content.
from drb_impl_ftp import DrbFtpNode
from drb_impl_ftp import BasicAuth
node = DrbFtpNode("URL", "HOST", auth=BasicAuth("username", "password"))
Ftp protocol allows navigation inside the ftp server. To do so this implementation is able to provide children of the same FTP type.
FTP node is able to manage Basic authentication based on username and
password, as well as TLS ans SSL authentication by using the FTP_TLS.auth()
.
This method set up a secure control connection.
By default, the node will try to connect with the SSL protocol if you want to change protocol you have to give
You can find all the version of TLS and SSL supported here https://docs.python.org/3/library/ftplib.html#ftplib.FTP_TLS.ssl_version
None
The documentation of this implementation can be found here https://drb-python.gitlab.io/impl/ftp
FAQs
DRB Ftp implementation
We found that drb-impl-ftp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.