
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
The PhilDB timeseries database client aims to provide a
PhilDB database API <https://phildb.readthedocs.org/en/latest/api/phildb.html#module-phildb.database>
_
compatible object. At this stage mostly the read related methods have been implemented.
None of the write related methods have been implemented.
Any methods yet to be implemented in the client will raise a NotImplementedError if called.
.. code::
from phildb_client import PhilDBClient
db = PhilDBClient('http://localhost:8889')
db.ts_list()
This client is experimental and depends on the experimental PhilDB server <https://github.com/amacd31/phildb_server>
.
By default the client reads data from the server in the msgpack <https://msgpack.org>
format.
The data served by the server and read by the client is using the
experimental Pandas msgpack implementation <http://pandas.pydata.org/pandas-docs/stable/generated/pandas.DataFrame.to_msgpack.html>
_,
as such it is dependant on the version of Pandas used by the server and the client being compatible.
There is a known issue with Pandas < v0.17 (which has been made a dependency for the server),
the client however can use an older version of Pandas and use JSON as the transport format instead of msgpack if required.
For example:
.. code::
from phildb_client import PhilDBClient
db = PhilDBClient('http://localhost:8889', 'json')
FAQs
PhilDB timeseries database client
We found that phildb-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.