
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
A simple CLI for sending form related mails in the context of Open Data Kit (ODK)
A simple CLI to send Mails for ODK. Built with Typer and packaged with Poetry.
Install the cli via pip
pip install odk-mailer
Configuration example
Config location: ~/.env
:
SMTP_HOST=smtp.freesmtpservers.com
SMTP_PORT=25
SMTP_USER=
SMTP_PASS=
CRON_FREQUENCY=15
NOTIFY_TO=foo@bar.com,faz@baz.com
NOTIFY_FROM=odk-mailer@freesmtpservers.com
ODK_HOST=https://your.odk-central.host.tld
Create and run a new mail job
# Create a new mail job with a unique ID
odk-mailer jobs create
# Run the job by ID
odk-mailer jobs run <job-id>
# Remove a job
odk-mailer jobs delete <job-id>
List mail jobs and evaluate them
# Show all jobs
odk-mailer jobs list
# Run all jobs that are ready to be sent
odk-mailer jobs evaluate
Initiate crontab to periodically evaluate mailjobs and run them directly after
odk-mailer cron init
Building a Package - Guide: https://typer.tiangolo.com/tutorial/package/#create-your-app
Requirements
# clone the repo and cd into
poetry shell
poetry install
# Run it with
poetry run odk-mailer
Push to PyPi
poetry build
poetry publish
# requires credentials to be setup: poetry config pypi-token.pypi <my-token>
FAQs
A simple CLI for sending form related mails in the context of Open Data Kit (ODK)
We found that odk-mailer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.