
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Micropython routines for GrowMax plant watering automation boards by OpenSensor.io
To purchase a Growmax board or four sourcing parts, visit https://opensensor.io
To install the growmax
package on a Pico or BananaPi Pico (ESP32S3), first install the appropriate firmware for Micropython that is for your device.
Ensure that you have Thonny IDE installed; for more information visit: https://thonny.org/
Launch Thonny IDE with your device connected.
Go to Tools -> Manage Packages and search for growmax
Install the latest version of growmax
.
Now create a new file and save it to your device as main.py
In this file invoke the main routine of growmax:
from growmax.routine import main
main()
Next you need to create your config file.
/lib/growmax/config.py
config.py
WATER_SENSOR_LOW_ENABLED
Defaults True
. Checks the low water level sensor before invoking the pumps.WATER_SENSOR_LOW
Defaults 22
. Which GPIO port has the Optomax water level sensor for low levels? Supported growmax
board ports are 21 and 22Test the routine by running the created main.py
in Thonny IDE. You should see output in the terminal and the program should not have any errors.
Once you have verified the pico runs the code properly, your device is now plug and play ready.
Simply supply 5V USB voltage by plugging the pico growmax board into a common USB wall wart and the pico will boot the main
routine.
The growmax
is designed with the pico power requirements in mind. When modifying the application logic, it is important to realize:
FAQs
Micropython routines for automated plant watering and monitoring.
We found that growmax demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.