Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
English: MS Fabric library for interacting with the Fabric ecosystem API. Español: Biblioteca de Microsoft Fabric para interactuar con la API del ecosistema de Fabric.
pyfabric es una librerÃa de Python que automatiza procesos y trabaja con recursos de Microsoft Fabric.
Para instalar la librerÃa, ejecuta el siguiente comando:
pip install pyfabric
Para utilizar esta librerÃa, es necesario conceder permisos de administrador. Los permisos requeridos son:
Crea un secreto con la siguiente estructura:
{
"tenant_id": "con el tenant",
"client_id": "el id",
"client_secret": "el secreto"
}
Si vas a utilizar la librerÃa en Windows, crea una variable de entorno llamada MSFABRIC_CONF
con el valor del secreto creado anteriormente.
MSFABRIC_CONF
como el nombre de la variable y el valor del secreto como el valor de la variable.Además, es necesario crear otra variable de entorno llamada MSFABRIC_EMAIL_SENDER
, que debe contener el correo electrónico que enviará las notificaciones, el services principal se encargará de enviar correo con los permisos establecidos anteriormente a nombre de la cuenta de elección. Se recomienda utilizar un correo especÃfico para notificaciones y no uno personal.
Aquà hay un ejemplo básico de cómo utilizar la librerÃa:
from pyfabric import Fabric
# Uso del Fabric con notificaciones opcionales
fabric = Fabric(send_notification=True, email_list=["LISTA DE CORREOS"], language="es")
# Reanudar capacidad
fabric.capacity(name="nombre capacidad").resume()
# O tal vez suspender capacidad
fabric.capacity(name="nombre capacidad").suspend()
send_notification
es opcional, si se establece en True
, email_list
debe ser proporcionada.language
es opcional, y se utiliza para recibir el correo en inglés o español.pyfabric is a Python library that automates processes and works with Microsoft Fabric resources.
To install the library, run the following command:
pip install pyfabric
To use this library, you need to grant admin permissions. The required permissions are:
Create a secret with the following structure:
{
"tenant_id": "your tenant",
"client_id": "your id",
"client_secret": "your secret"
}
If you are going to use the library on Windows, create an environment variable called MSFABRIC_CONF
with the value of the previously created secret.
MSFabric_Conf
as the variable name and the secret value as the variable value.Additionally, you need to create another environment variable called MSFABRIC_EMAIL_SENDER
, which should contain the email address that will send the notifications. It is recommended to use a specific email for notifications rather than a personal one.
Here is a basic example of how to use the library:
from pyfabric import Fabric
# Using Fabric with optional notifications
fabric = Fabric(send_notification=True, email_list=["LIST OF EMAILS"], language="en")
# Resume capacity
fabric.capacity(name="fabdalaticdev001").resume()
# Or maybe suspend capacity
fabric.capacity(name="fabdalaticdev001").suspend()
send_notification
is optional, if set to True
, email_list
must be provided.language
is optional and is used to receive the email in English or Spanish.FAQs
English: MS Fabric library for interacting with the Fabric ecosystem API. Español: Biblioteca de Microsoft Fabric para interactuar con la API del ecosistema de Fabric.
We found that msfabric demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.