
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
APIs and tools to work with abstract "models" - files with numpy arrays and metadata. It is possible to publish models, list them. There is a built-in cache. Storage has backends.
Modelforge is a foundation for sharing trained machine learning models. It is a set of command line tools and a Python library. Modelforge maintains model files in a third-party remote storage service ("cloud") using the backend mechanism. Model metadata (download links, names, descriptions, versions, etc.) resides in a Git repository called the "Index", and documentation is automatically generated there. Modelforge does no assumptions about the models: they can be of any origin, such as TensorFlow, scikit-learn, or your custom. The underlying model storage format - Advanced Scientific Data Format - can wrap any data easily and efficiently, but it's the developer's responsibility to convert.
Learn more about:
You can run Modelforge through Docker:
docker run -it --rm srcd/modelforge --help
or install it using the Python package manager:
pip3 install modelforge
The project exposes two interfaces: command line and API.
Contributions are pretty much welcome! Please follow the contributions guide and the code of conduct.
If you wish to make your MLonCode model available in src-d/models,
please fork that repository and run modelforge publish
to upload your model on your fork. Then
create a pull request. You should provide read access to the model file for everybody. If you
consider using our Google Cloud Storage bucket, feel free to contact us through GitHub issues.
FAQs
APIs and tools to work with abstract "models" - files with numpy arrays and metadata. It is possible to publish models, list them. There is a built-in cache. Storage has backends.
We found that modelforge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.