Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Package for interacting with Open Zeppelin's Defender API
Using pip
$ pip install oz-defender
Using poetry
$ poetry add oz-defender
This package is intended to mirror as closely as possible the defender-client JavaScript package to provide a unified API across languages.
See defender-relay-client for this module's inspiration.
For the Relay API, used for administrating your team's relayers:
from oz_defender.relay import RelayClient
relay = RelayClient(api_key='defender-team-api-key', api_secret='defender-team-api-secret')
relay.list_relayers()
For the Relayer API, used for transaction related operations with a specific relayer
from oz_defender.relay import RelayerClient
relayer = RelayerClient(api_key='relayer-api-key', api_secret='relayer-api-secret')
relayer.list_transactions()
oz-defender
is under active development so we welcome any and all contributions to improve the package!
To make it as simple as possible for us to help you, please include the following when creating an issue:
oz-defender
versionNOTE: Unless the change you're making is minor, please open an issue in GitHub to discuss a change before opening a PR
This package is developed using poetry. Make sure its installed on your machine and peep the documentation to familiarize yourself with its commands.
$ git clone https://github.com/franklin-systems/oz-defender
pre-commit
and its hooks$ pip install pre-commit
or if you're using macOS
$ brew install pre-commit
then
$ pre-commit install
$ git checkout my-new-feature-branch
oz_defender
locally$ poetry install
or
$ poetry update
poetry
virtual env$ poetry shell
(oz-defender-py3.10) $ python3
oz_defender
and off you go>>> from oz_defender import *
>>> relayer = RelayerClient(api_key='relayer-api-key', api_secret='relayer-api-secret')
FAQs
Unknown package
We found that oz-defender demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.