Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Python client for getting air pollution data from NILU sensor stations in Norway. The package comes with clients that can fetch and cache data from nilus api.
According to the api documentation from nilu.no and luftkvalitet.info, when using data fetched through this client an acknowledgement to both nilu.no and luftkvalitet.info needs to be included.
Finding all station in an area:
import niluclient as nilu
stations = nilu.lookup_stations_in_area('Bergen')
Finding all stations and sensor reading within 20 km from a location:
import niluclient as nilu
client = nilu.create_location_client(60.123456, 5.123456)
# name of all stations found.
station_names = client.station_names
# dict of all stations with readings.
stations = client.station_data
# all stations NO2 readings
for station in stations:
no2_value = station.sensors[nilu.NO2].value
Finding readings from a specified station, and update cached value:
import niluclient as nilu
client = nilu.create_station_client('Kannik')
no2_value = client.data.sensors[nilu.NO2].value
no2_unit = client.data.sensors[nilu.NO2].unit_of_measurement
# after an hour. (Data from the api will only update on the hour)
client.update()
new_no2_value = client.data.sensors[nilu.NO2].value
Air quality index: Fetch measured value and index.
niluclient.NiluStationClient
niluclient.NiluLocationClient
Observations: Fetch measured value.
Day average Calculates day average for a given time period.
Lookup api: Lists metadata used for filtering.
niluclient.AREAS
constants)niluclient.lookup_stations_in_area('')
niluclient.MEASURABLE_COMPONENTS
constants)Source: endpoints and description fetched from nilu api documentation
FAQs
An API client for getting pollution data from NILU sensor stations in Norway.
We found that niluclient demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.