
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
A simple python class for creating Read Evaluate Print Line (REPL) interfaces.
This module requires Python 3.7 or higher.
Additionally this library makes use of the GNU readline Interface, so it will only work on Unix based systems.
This module exposes the REPL
class which can be used to quickly create a REPL interface. REPL will read in a line of user input via a custom input function that allows you to edit the text by moving the cursor with the arrow keys, as well as view the history of previous inputs.
from easyrepl import REPL
for line in REPL():
# do something with line
print(line)
which will create a simple echoing REPL interface that repeats any line you type into it.
>>> hello
hello
>>> world
world
>>>
The input allows common terminal shortcuts like:
Additionally, multi-line input can be achieved by starting a line with triple quotes ("""
or '''
), and ending the final line with a matching triple quote. Triple quotes in the middle of a line will have no effect.
>>> """
... This is a multi-line input
... that will continue until
... the user enters three quotes
... at the end of a line
... """
This is a multi-line input
that will continue until
the user enters three quotes
at the end of a line
>>>
Note that a single newline will be stripped from the beginning and end of the input if present.
FAQs
A simple python class for creating Read Evaluate Print Line (REPL) interfaces
We found that easyrepl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.