
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
functional-functions
Advanced tools
Created by the FBI Compass team, this package contains our team's most commonly used and useful functions
Contents include functions for connecting to snowflake, saving and loading pickles. For help with what functions are available, please run help()
To install functional-functions, you can install it using pip:
pip install functional_functions
To use the redshift query connector, you must additionally ensure you have downloaded/installed:
brew tap adoptopenjdk/openjdk
brew install --cask adoptopenjdk8
Currently all files are in the init.py. Import each function as needed. First time users are encouraged to import and run help() for more info.
import functional_functions
from functional_functions import help, query_snowflake
Some functions, especially the connections, are built off of a settings.py file which stores local creds. You can view a sample settings file called 'settings.py.sample' in the included files. Obviously feel free to use another method to store and provide creds if you want. We now have added the ability to directly reference environmental variables and/or a .env file. See creds.env.sample for example file.
However if you are using 'settings.py' as your creds file, you will need to place it in your overall site-packages folder. If you are using 'creds.env' you will need to place it in your root folder or have a direct reference to it when you are loading it in. I'd recommend using python package python-dotenv.
NOTE: Yes I know code shouldnt be stored in init.py, but I also am learning packages and such!.
Please contact lawrence.chin@compass.com if there are any questions, bugs, or issues.
FAQs
Commonly used functions by the Compass FBI Team
We found that functional-functions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.