Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
making-with-code-cli
Advanced tools
This package provides the command-line tool mwc
which accompanies the Making With Code
introductory Computer Science curriculum. mwc
helps students configure their computers,
sets up git repositories for course assignemnts, and provides helpers for other course tasks
like running tests and accessing the curriculum.
Teachers will be able to use mwc
to adminster their courses, including tools for feedback and
assessment. The overall goal of the project is to provide computational infrastructure to teachers
and schools allowing them to teach CS through open-ended projects using real tools, supporting
personal relationships with powerful ideas and rich computing cultures.
mwc
can be installed via pip. However, if you're a student or teacher using
Making With Code, there is a separate bootstrapping process you should follow.
Please consult your curriculum website (or ask your teacher) for detailed instructions
on how and why to use this tool.
pip3 install making-with-code-cli
Once installed, you can set up your computer using the mwc setup
command. Run
mwc --help
to see all the commands available.
If you're interested in computing education and want to learn more about Making With Code, please contact Dr. Chris Proctor.
FAQs
Courseware for Making With Code
We found that making-with-code-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.