
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
indpack
Advanced tools
Cross-platform process introspection library for Python. Enumerates running processes, extracts their command line arguments, and parses those arguments into structured key-value mappings.
Supports Linux (procfs), macOS (ps), and Windows (wmic).
uv pip install .
Or for development:
uv sync
from indpack import get_ps_pids, get_pid_args, parse_pid_args
# List all PIDs
pids = get_ps_pids()
# Get command line args for a specific PID
args = get_pid_args(pids[0])
# Parse args into a dict
parsed = parse_pid_args(args)
# {"config": "/etc/app.conf", "verbose": True, "_positional": ["/usr/bin/app"]}
get_ps_pids() -> list[str]Returns PIDs of all running processes as strings. Uses /proc on Linux, ps on macOS, and wmic on Windows.
get_pid_args(pid: str) -> list[str]Returns the command line arguments for a given PID. Returns an empty list if the process is inaccessible (permissions, already exited, etc).
parse_pid_args(args: list[str]) -> dict[str, object]Parses a list of command line arguments into a dictionary:
| Input style | Result |
|---|---|
--key=value | {"key": "value"} |
--key value | {"key": "value"} |
-k value | {"k": "value"} |
--flag | {"flag": True} |
-abc | {"a": True, "b": True, "c": True} |
positional | {"_positional": ["positional"]} |
-- --raw | {"_positional": ["--raw"]} |
# List all PIDs
indpack pids
# Show args for a PID
indpack args 1234
# Parse args into JSON
indpack parse 1234
# Full inspection (all processes or limited)
indpack inspect
indpack inspect -n 10
# All tests
uv run pytest -v
# Unit tests only
uv run pytest -v -m "not integration"
# Integration tests only
uv run pytest -v -m integration
src/indpack/
__init__.py # Public API exports
__main__.py # python -m indpack support
core.py # get_ps_pids, get_pid_args, parse_pid_args
cli.py # argparse CLI
tests/
test_core.py # Unit tests (mocked platform calls)
test_cli.py # Unit tests (mocked library calls)
test_integration.py # Live process table tests
FAQs
Cross-platform process introspection library
We found that indpack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.