
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
palace
Advanced tools
Palace is a Python 3D audio API wrapping around alure. To quote alure's README,
It uses OpenAL for audio rendering, and provides common higher-level features such as file loading and decoding, buffer caching, background streaming, and source management for virtually unlimited sound source handles.
In some sense, what palace aimes to be to OpenAL Soft is what ModernGL is to OpenGL (except that all the heavy-lifting are taken are by alure):
snake_case, @property, with context manager,
type annotationPalace requires Python 3.6+ for runtime and pip for installation.
Palace can be install from the Python Package Index via simply
pip install palace
Wheel distributions are built exclusively for GNU/Linux on amd64. If you want to help packaging for other platforms, please reach out on our mailing list.
Aside from the build dependencies listed in pyproject.toml, one will
additionally need compatible Python headers, alure, a C++14 compiler,
CMake 2.6+ (and probably git for fetching the source).
Palace can then be compiled and installed by running
pip install git+https://git.sr.ht/~cnx/palace
One may start with the examples for sample usage of palace.
For further information, Python's help is your friend and
the API is also available for online reference.
Our documentation contains a brief guide which may help you get started with the development. We also think that you might find our design principles appealing as well.
Palace is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
The full list of works bundled with palace and other credits can be found in our documentation.
FAQs
Pythonic Audio Library and Codecs Environment
We found that palace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.