Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
oogway_py
is the official Python SDK for Oogway AI
that requires no binaries. Quickly allow users to gain knowledge from Master Oogway in a few lines of code.
The oogway_py
SDK can be installed from PyPI via pip
:
pip install oogway_py
Export your OPENAI_API_KEY
in your terminal
Add the following code to your application to add Oogway AI to your app:
# import oogway ai python sdk
import asyncio
import sys
import oogway_py as oogway
ai = oogway.Oogway()
# change model name from python
ai.model_name = "gpt-4-0125-preview"
async def talk_to_oogway(question: str):
print(f"\n> You : {question}");
while True:
print("\n> Oogway : ", end="");
# python async generator for chunk streaming
async for chunk in ai.ask(question):
sys.stdout.write(chunk)
sys.stdout.flush()
question = input("\n\n> You: ")
That's it! Your application should now be able to allow users to converse with Master Oogway 🐢.
Note You can run the example above from the demo file.
Run python python/oogway_py/demo.py
or checkout the Jupyter Notebook Example
https://github.com/cs50victor/oogway_py/assets/52110451/aa762411-a8a9-4e50-a746-8374f8455700
FAQs
Unknown package
We found that oogway-py demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.