
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Githon is a python library that provides a GitHub REST API v3 Data Scraping.
With this library you can:
Run the command:
pip install githon
Import the GithubApi class and create an object. Optionally pass an access token to constructor.
>>> from githon import GithubApi
>>> gh = GithubApi('YOUR_ACCESS_TOKEN')
NOTE: With access_token, your rate limit will be 5000 requests per hour. If you don't provide an access_token, your number of requests will be limited to 60 requests per hour, according with GitHub REST API v3 docs. See more in https://developer.github.com/v3/#rate-limitingUse.
Sample code:
>>> gh.user_by_username('marcosvbras')
{ 'blog': 'https://about.me/marcosvbras', 'followers': 7, 'following': 28, ...}
user_by_username
: Request user based in Github login.user_by_id
: Request user based in Github User ID.user_emails
: Retrieve a list of emails from a given access_token. Requires the user access token.followers_by_id
: Request the user followers based in Github login.followers_by_username
: Request the user followers based in Github ID.following_by_id
: Request the user following based in Github ID.following_by_username
: Request the user following based in Github login.gists_by_id
: Request the user gists based in Github ID.gists_by_username
: Request the user gists based in Github login.repositories_by_id
: Request the user repositories based in Github ID.repositories_by_username
: Request the user repositories based in Github login.search_users
: Search users with a Github query.get_request_limit
: Request the API Rate Limit to your token.FAQs
A simple Data Scraping library for GitHub REST API v3
We found that githon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.