
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
This project is designed to monitor and manage inventory assets, including their types, assignments, lifecycle statuses, and related contracts, services, invoices, and RMAs.
classDiagram
class AssetType {
CharField name
SlugField slug
CharField description
ColorField color
}
class Asset {
CharField serial
CharField partnumber
CharField asset_number
CharField assignment_status
CharField lifecycle_status
ForeignKey assigned_object_type
PositiveBigIntegerField assigned_object_id
GenericForeignKey assigned_object
ForeignKey inventory_item
ForeignKey type
ForeignKey order_contract
CharField project
CharField vendor
PositiveIntegerField quantity
DecimalField price
DateField warranty_start
DateField warranty_end
TextField comments
}
class ComponentService {
DateField service_start
DateField service_end
CharField service_param
DecimalField service_price
CharField service_category
CharField service_category_vendor
ForeignKey asset
ForeignKey contract
TextField comments
}
class Contract {
CharField name
CharField name_internal
ForeignKey contractor
CharField type
DecimalField price
DateField signed
DateField accepted
DateField invoicing_start
DateField invoicing_end
ForeignKey parent
TextField comments
}
class Contractor {
CharField name
CharField company
CharField address
TextField comments
ForeignKey tenant
}
class Invoice {
CharField name
CharField name_internal
CharField project
ForeignKey contract
DecimalField price
DateField invoicing_start
DateField invoicing_end
TextField comments
}
class Probe {
DateTimeField time
DateTimeField creation_time
CharField device_descriptor
CharField site_descriptor
CharField location_descriptor
CharField part
CharField name
CharField serial
ForeignKey device
ForeignKey site
ForeignKey location
TextField description
TextField comments
JSONField discovered_data
CharField category
}
class RMA {
CharField rma_number
ForeignKey asset
CharField original_serial
CharField replacement_serial
CharField status
DateField date_issued
DateField date_replaced
TextField issue_description
TextField vendor_response
}
AssetType --> Asset : type
Asset --> ComponentService : asset
Asset --> RMA : asset
Asset --> Contract : order_contract
ComponentService --> Contract : contract
Contract --> Contractor : contractor
Contract --> Invoice : contract
Contractor --> Contract : contractor
Invoice --> Contract : contract
Probe --> Asset : asset
Contractor
Contract
).Contract
Invoice
) for billing.Contract
) for hierarchical contract management.Asset
) linked to the contract.ComponentService
) provided as part of the contract.Invoice
Asset
ComponentService
) and devices, sites, locations, rack.ComponentService
Probe
This structure enables easy tracking of assets, contracts, invoices, and services within the NetBox plugin.
To install the Inventory Monitor plugin, follow these steps:
Clone the repository:
git clone https://gitlab.cesnet.cz/701/done/inventory-monitor-plugin.git
cd inventory-monitor-plugin
Run the setup script:
python setup.py install
pip install inventory-monitor
To enable the plugin, add it to the PLUGINS
list in your configuration.py
:
PLUGINS = [
"inventory_monitor",
]
Run the database migrations:
python manage.py migrate
To use the Inventory Monitor plugin, follow these steps:
Start the application:
python manage.py runserver
Access the application in your web browser at http://localhost:8000
.
We welcome contributions to the Inventory Monitor project! To contribute, follow these steps:
This project is licensed under the MIT License. See the LICENSE file for more details.
FAQs
Asset Management with semi-auto discovery processes
We found that inventory-monitor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.