
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
jupyterlab-open-warning
Advanced tools
JupyterLab extension to display a warning dialog when opening a file that another user has open.
JupyterLab extension to display a warning dialog when opening a file that another user has open.
Install the latest version of JupyterLab Open Warning using pip:
pip install -U jupyterlab-open-warning
This extension should run alongside JupyterLab version 4 and the JupyterLab Real-Time Collaboration extension.
To automatically install along with Real-Time Collaboration, use the rtc
extra:
pip install -U "jupyterlab-open-warning[rtc]"
While the Real-Time Collaboration extension is required in order to display open warning dialogs, the collaboration functionality can be disabled by running JupyterLab with the following option:
jupyter lab --YDocExtension.disable_rtc True
To develop, the following dependencies must be installed:
To build the extension and start up a JupyterLab server for development, run:
hatch run dev
When the source code changes, the extension should be automatically rebuilt, and the updated extension will be used when the page is reloaded.
[!NOTE]
On Windows, symbolic links must be activated forhatch run dev
to work. On Windows 10 or above, this can be done by activating developer mode.Alternatively, you can run
hatch run clean hatch env remove default hatch run jupyter lab
to completely reinstall the extension and start JupyterLab each time the source code changes.
FAQs
JupyterLab extension to display a warning dialog when opening a file that another user has open.
We found that jupyterlab-open-warning demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.