Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This file is an extract from the the online documentation at https://github.com/stamparm/pcapy-ng/blob/master/README.md
Pcapy-NG is a Python extension module that enables software written in Python to access the routines from the pcap packet capture library. It is a replacement of Pcapy, which is not maintained any more and stopped working altogether on Python3.10.
From libpcap's documentation: "Libpcap is a system-independent interface for user-level packet capture. Libpcap provides a portable framework for low-level network monitoring. Applications include network statistics collection, security monitoring, network debugging, etc."
Grab the latest stable release, unpack it and run 'python setup.py install' from the directory where you placed it. Isn't that easy?
As this extension is written in C++ it needs to be compiled for the host system before it can be accessed from Python. Fortunately this process has been made easy by the setup.py script. In order to compile and install the source execute the following command from the directory where the pcapy's distribution has been unpacked: 'python setup.py install'. This will install the extension into the default Python's modules path; note that you might need special permissions to write there. For more information on what commands and options are available from setup.py, run 'python setup.py --help-commands'.
This extension has been tested under Linux and Windows systems and is known to work there, but it ought to work out-of-the-box on any system where Python and libpcap are available.
This software is provided under under the Apache Software License. See the accompanying LICENSE file for more information.
Whether you want to report a bug, send a patch or give some suggestions on this package, drop a few lines at miroslav@sqlmap.org.
FAQs
Python pcap extension
We found that pcapy-ng demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.