Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Simple sending of smtp emails using environment variables
pip install --upgrade envsmtp
You must set SMTP_USER
and SMTP_PASS
in your environment with your user and password!
See additional optional settings in example.env
This package will by default use STARTTLS settings for smtp.gmail.com
on port 587. If you wish to change these settings, you can set your own environment variables for SMTP_HOST
and SMTP_PORT
Once installed, here's a simple example of how to use this package:
from envsmtp import EmailMessage
msg = EmailMessage(
sender="sender@example.com",
receipients="receipient@example.com",
subject="envsmtp test",
body="This is just a test message",
)
msg.smtp_send()
To send with attachments:
from envsmtp import EmailMessage, EmailAttachment
attachments = [
EmailAttachment(content='/path/to/file.txt'),
EmailAttachment(content=b'randombytes', filename='bytes_test.txt'),
EmailAttachment(content='/path/to/another.txt', filename='this_name_is_different_.txt')
]
msg = EmailMessage(
sender="sender@example.com",
receipients="receipient@example.com",
subject="envsmtp test",
body="This is just a test message",
attachments=attachments,
)
msg.smtp_send()
Tested with & designed for python 3.10, see requirements.txt for additional dependencies
For bugs / feature requests please submit issues
If you would like to contribute to this project, you are welcome to submit a pull request
This project is being developed independently, we provide the package "as-is" without any implied warranty or liability, usage is your own responsibility
Just because I like badges
FAQs
Simple sending of smtp emails using env variables
We found that envsmtp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.