
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
This Python code parses an Energy Service Provider Interface (ESPI), or "Green Button", XML file into Python objects.
Run parse_feed()
from the parse.py
file to get a list of UsagePoint
objects. From there you should be able to explore all of the data in the
feed. Documentation is a little lacking at the moment, but the class
members mostly match the names from the ESPI standard (or at least the XML
entities).
There's a bit of documentation in the doc
directory about the ESPI
standard, mostly figured out from public sources and actual ESPI files.
Forked from the original repository greenbutton-objects and packaged to be published on PyPI.
Used by the Code for Boston Home Energy Analysis Tool.
Simple steps for development setup:
pip install -e .
builds the python egg for greenbutton_objects and then installs greenbutton_objectspip install -r requirements-dev.txt
which installs the libraries required to develop greenbutton_objectsThen, you should be able to run pytest
, also from any directory, and see the test run successfully.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.