
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
A simple flake8 plugin that forbids the usage of
breakpoint
andpdb.set_trace
functions in production code.
pip install flake8-debug
✨ 🍰 ✨
git clone git@github.com:vyahello/flake8-debug.git
cd flake8-debug
python3 -m venv venv
. venv/bin/activate
pip install -e .
DB100
- print function is detected.DB200
- breakpoint function is detected.DB201
- breakpointhook function is detected.DB300
- set_trace function is detected.# foo.py
import pdb
from pdb import set_trace
from sys import breakpointhook
def bar(*a):
print(a)
breakpoint()
breakpointhook()
set_trace()
pdb.set_trace()
flake8 foo.py
foo.py:7:5: DB100 print() function usage is detected
foo.py:8:5: DB200 breakpoint() function usage is detected
foo.py:9:5: DB201 breakpointhook() function usage is detected
foo.py:10:5: DB300 set_trace() function usage is detected
foo.py:11:5: DB300 set_trace() function usage is detected
Please run the following script to start plugin tests:
pytest
To be able to run code analysis, please execute command below:
./analyse-source-code.sh
Author – Vladimir Yahello.
Distributed under the MIT
license. See license for more information.
You can reach out me at:
I would highly appreciate any contribution and support. If you are interested to add your ideas into project please follow next simple steps:
git
for the first time after cloning with your name
and email
pip install -r requirements.txt
to install all project dependenciespip install -r requirements-dev.txt
to install all development project dependenciesAll recent activities and ideas are described at project issues page. If you have ideas you want to change/implement please do not hesitate and create an issue.
FAQs
Flake8 plugin to forbid debug function usage
We found that flake8-debug demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.