
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
mynyt
is a package that brings the New York Times to you with rss feeds and emails.
Most users of the New York Times appreciate a quick and easy way to access news every day in the morning. However. they find it difficult to customize based on their individual needs and preferences. By making a Python package, anyone can easily customize their own NYT summary.
Author: Kevin Zhu
To install mynyt
, use pip: pip install mynyt
.
However, many prefer to use a virtual environment.
macOS / Linux:
# make your desired directory
mkdir /path/to/your/directory
cd /path/to/your/directory
# setup the .venv (or whatever you want to name it)
pip install virtualenv
python3 -m venv .venv
# install mynyt
source .venv/bin/activate
pip install mynyt
deactivate # when you are completely done
Windows CMD:
# make your desired directory
mkdir C:path\to\your\directory
cd C:path\to\your\directory
# setup the .venv (or whatever you want to name it)
pip install virtualenv
python3 -m venv .venv
# install mynyt
.venv\Scripts\activate
pip install mynyt
deactivate # when you are completely done
The most basic features can be found in the examples, but you must setup the emailing yourself (tutorial below).
from mynyt import MyNYT
news = MyNYT('your.email@gmail.com', 'your appp pass word')
news.get_all_stories()
news.remove_duplicates(all_stories = None)
news.trim_to_length(length = 12)
news.convert_news_to_html()
news.send_email(recipient = 'your.email@gmail.com')
See CUSTOMIZATION.md
for information on customization or examples for it in action.
This project brings in many features that require tutorials on how to use.
This package uses smtplib to send emails. Both Google and Outlook supports sending through the SMTP protocol for Python.
Gmail: (smtp.gmail.com, 587)
Outlook: (smtp.office365.com, 587)
You may provide this to server info depending on your needs.
For either to work, the user will need to create an app password.
First, to create an app password, you need 2-Step Verification on your account.
This can be through a variety of methods, for both Gmail and Outlook. They both have their own authenticator apps and allow secondary emails or phone numbers.
Then, you need to make the app password.
These links will take you to the page to create an app password after you have 2FA enabled.
Gmail: https://myaccount.google.com/apppasswords
Outlook: https://go.microsoft.com/fwlink/?linkid=2274139
They only appear once and will grant complete access to your account!! You can always make more. Finally, copy and paste the app password into the instantiation for MyNYT.
Further help can be found here: Gmail: https://support.google.com/mail/answer/185833?hl=en
If you want a daily email with a snapshot of the NYT at a predetermined time, we have to use automation to make it happen.
Because this package provides a news summary of the most recent events, you can use it with a Crontab. Crontab is available on Unix devices and is not for Windows users.
The format of minute hour day-of-month month day-of-week command
allows us to have the following command:
x y * * * ...
will run at y:x o' clock (e.g.: if x was 30 and y was 18, it would be at 6:30 PM)
If you would like to have a daily email at 7:00 AM to run main.py, you could have the following command:
0 7 * * * cd /home/path/to/your/directory && .venv/bin/python3 main.py
For people that want to have two emails a day (at 7AM and 4PM), simply edit the crontab:
0 7,15 * * * cd /home/path/to/your/directory && .venv/bin/python3 main.py
If you did not use a venv, simply replace .venv/bin/python3
with your path to python, like /path/to/your/python3
or just python3
if it was added to your path..
Visit https://crontab.guru/ to learn more.
Windows users must take a different approach with Task Scheduler.
Press Win + R, type taskschd.msc, and hit Enter.
Create a basic task and name it, choosing your preferred frequency (like daily). The start time can also be chosen, something like 7AM.
It will start a program, with the program C:\path\to\your\python.exe
and argument C:\path\to\your\directory\main.py
.
Visit https://learn.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page to learn more.
This package, mynyt, retrieves publicly available news content via RSS feeds from the New York Times (NYT). All news articles and content, are owned by the New York Times and are subject to their Terms of Service. By using this package, you agree to comply with the New York Times' Terms of Service and all relevant copyright laws.
Wordle is owned by the NYT. This package provides a version of Wordle that mimics its behavior for personal and non-commercial use.
The content provided by this package is intended for personal (like sending emails to yourself) and non-commercial use only. Redistribution, modification, or commercial use of the content retrieved from NYT is prohibited unless explicitly allowed by the New York Times.
The License is an MIT License found in the LICENSE file.
FAQs
a package that brings the New York Times to you with rss feeds and emails
We found that mynyt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.