Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This is a mostly complete wrapper of the Iterable API built with Python.
The interface is still in a state of flux, some methods will be renamed but the signatures should stay the same.
This is a pure python development kit for interacting with the Iterable API. If you find anything to be out of date or are looking for support, you can file an issue on Github.
You can download and install the package from the Python Package Index with:
pip install iterable-api
from iterable import Iterable
api = Iterable('YOUR_API_KEY')
api.events.track(event_name='hello_iterable', user_id=42, created_at=datetime.now().to_timestamp())
If you're familiar with environment variables, you can set ITERABLE_API_KEY
. In that case you can set up the api client like so:
from os import getenv
from iterable import Iterable
api = Iterable(getenv('ITERABLE_API_KEY'))
If you're interested in getting data out of your Iterable account, you can use the export_data_api
method on the API client.
The API client is a requests.Session under the hood with HTTP method names as top level functions in the wrapper.
If you want to drop down to the client, you only need to provide the resource path, e.g.:
api.get('/events/track')
This might be useful for exploring the API or debugging an issue.
If you're interested in extending this library, please follow these guidelines:
This project uses poetry for now, so follow your preferred procedure for that.
poetry install
The library uses pytest - you can run the tests by invoking the following:
poetry run pytest
FAQs
Iterable API wrapper
We found that iterable-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.