
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Documentation available at Read the Docs.
A Python based chat bot framework for Mattermost. The code for this bot framework was heavily re-factored in v2.0.0 and will only work with Python 3.8 or higher. For Python 2 and Python3 < 3.8 support, please use versions v1.3.9 or lower.
Mattermost | mmpy_bot |
---|---|
>= 4.0 | > 1.2.0 |
< 4.0 | unsupported |
:warning: Warning: pip will grab v1.x if your Python version is less than 3.8!
pip install mmpy-bot
pip install mmpy-bot==1.3.9
First you need to create a bot account on your Mattermost server. Note: Enable Bot Account Creation must be enabled under System Console
Note that some API functions, such as ephemeral message replies, will require the bot to be part of the System Admin group, however most API functions will work with a regular Member account role. Just be aware that if some API functions are not working, it may be due to a lack of appropriate permissions.
Create an entrypoint file (or copy the one provided), that defines your Mattermost server and bot account settings and imports the desired modules.
Example my_bot.py
:
#!/usr/bin/env python
from mmpy_bot import Bot, Settings
from my_plugin import MyPlugin
bot = Bot(
settings=Settings(
MATTERMOST_URL = "http://chat.example.com",
MATTERMOST_PORT = 443,
BOT_TOKEN = "a69155mvlsobcnqpfdceqihaa",
BOT_TEAM = "test",
SSL_VERIFY = True,
), # Either specify your settings here or as environment variables.
plugins=[MyPlugin()], # Add your own plugins here.
)
bot.run()
Set the executable bit on the entrypoint file (i.e. chmod +x my_bot.py
) and start your bot from the command prompt. Now you can talk to your bot in your Mattermost client!
In order to get the most out of your bot, you will need to write your own plugins. Refer to the Plugins Documentation to get started.
The primary channel for communication is GitHub via Issues or Pull requests but you may also find some of us in Discord for some real-time interaction.
FAQs
A python based bot for Mattermost with its own webhook server.
We found that mmpy-bot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.