
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
An open-source interoperability standard for tools and content management systems used in media production.
In modern creative pipelines, data is often managed by an authoritative system (Asset Management System, Digital Asset Manager, MAM, et. al).
It is common for media creation tools to reference this managed data by its present location in a file system.
OpenAssetIO enables tools to reference managed data by identity (using an "Entity Reference") instead of a file system path.
This is achieved through the definition of a common set of interactions between a host of the API (eg: a Digital Content Creation tool or pipeline script) and an Asset Management System.
This common API surface area removes the need for common pipeline business logic to be re-implemented against the native API of each tool, and allows the tools themselves to design new workflows that streamline the creation of complex assets.
FAQs
An open-source interoperability standard for tools and content management systems used in media production.
We found that openassetio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.