Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Extract data from Excel documents
pip install exex
Load Excel file
from openpyxl import load_workbook
from exex import parse
book = load_workbook("sample.xlsx") # load excel file
sheet = book.active # get active sheet
Single cell by name
parse.values(sheet["A1"])
"name"
Single cell by row/column number
parse.values(sheet.cell(row=1, column=1))
"name"
Range of cells
parse.values(sheet["A1":"B2"])
[
["name", "abbreviation"],
["alpha", "a"],
]
All cells
parse.values(sheet.values)
[
["name", "abbreviation", "age"],
["alpha", "a", 1],
["beta", "b", 2],
["gamma", "g", 3],
]
Row by number
parse.values(sheet[1])
["alpha", "a", 1]
Range of rows
parse.values(sheet[1:2])
[
["name", "abbreviation", "age"],
["alpha", "a", 1],
]
Column by name
parse.values(sheet["A"])
["name", "alpha", "beta", "gamma"]
Rangge of columns
parse.values(sheet["A:B"])
[
["name", "alpha", "beta", "gamma"],
["abbreviation", "a", "b", "g"],
]
Ways to access sheets
# Sheets
book.sheets[0] # (sheet) sheet by index
book.sheets["prices"] # (sheet) sheet by name
book.active # (sheet) active sheet
book.sheetnames # (array) sheet names
Setup
poetry install
Tests (local Python version)
poetry run pytest
Tests (all Python versions defined in tox.ini
)
poetry run tox
Code formatting (black)
poetry run black .
FAQs
Extract data from Excel documents.
We found that exex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.