Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
heapprof is a logging, sampling heap profiler for Python 3.7+.
It comes with a suite of visualization and analysis tools (including time plots, flame graphs, and flow graphs), as well as an API for doing your own analyses of the results.
heapprof is complementary to tracemalloc, which is a snapshotting heap profiler. The difference is that tracemalloc keeps track of live memory internally, and only writes snapshots when its snapshot() function is called; this means it has slightly lower overhead, but you have to know the moments at which you'll want a snapshot before the program starts. This makes it particularly useful for finding leaks (from the snapshot at program exit), but not as good for understanding events like memory spikes.
You can install heapprof with pip install heapprof
. heapprof is released under the
MIT License.
You can read all the documentation at humu.github.io/heapprof.
If you're trying to find something in the GitHub repository, here's a brief directory (since, like most Python packages, this is a maze of twisty subdirectories, all different):
heapprof
contains the Python package itself. (The API and visualization logic)_heapprof
contains the C/C++ package. (The core profiling logic)docs_src
contains the sources for the documentation, mostly as .md
and .rst
files.docs
contains the compiled HTML version of docs_src
, created with tools/docs.py
and checked
in.tools
contains tools useful when modifying heapprof itself.setup.py
is the master build configuration for the PIP package..flake8
and .pylintrc
are the configuration for Python linting.CPPLINT.cfg
is the configuration for C/C++ linting.mypy.ini
is the configuration for Python type checking.Gemfile
is for setting up Jekyll for documentation hosting._config.yml
is the configuration for Jekyll serving.docs/Makefile
and docs/conf.py
are the configuration for building the HTML docs image via
Sphinx..circleci
is the configuration for continuous integration testing.pyproject.toml
and the root requirements.txt
make setuptools
happy.build
contains C/C++ dependencies and their compiled images; it's managed by setup.py
._site
contains the final Jekyll site which is served for documentation; it's created if you
run bundle exec jekyll serve
to run the docs web server locally.FAQs
Logging heap profiler
We found that heapprof demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.