
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
A REST OpenAPI Backend for creating ISCC codes for digital media files.
Note: This is work in progress. Use with care and at your own risk
The Webservice is build with FastAPI and makes use of the ISCC reference implementation and the ISCC Command Line Tool and includes an interactive API documentation:
The Docker image is published at https://hub.docker.com/r/titusz/iscc-service
If you are using poetry:
For the 'lookup' endpoint to work you must provide env variables for node connection. See config.py
$ pip3 install iscc-service
Run webservice via uvicorn
$ isccservice
INFO: Started server process [18800]
INFO: Waiting for application startup.
INFO: Application startup complete.
INFO: Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
docker login
docker build -t iscc-service -f Dockerfile .
docker run --rm -p 8080:8080 -it iscc-service
docker tag iscc-service username/iscc-service:0.1.9
docker push username/iscc-service:0.1.9
MIT © 2019-2020 Titusz Pan
FAQs
ISCC Web Service API
We found that iscc-service demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.