Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A wrapper around the Trello API written in Python. Each Trello object is represented by a corresponding Python object. The attributes of these objects are cached, but the child objects are not. This can possibly be improved when the API allows for notification subscriptions; this would allow caching (assuming a connection was available to invalidate the cache as appropriate).
I've created a Trello Board <https://trello.com/board/py-trello/4f145d87b2f9f15d6d027b53>
_
for feature requests, discussion and some development tracking.
::
pip install py-trello
.. code-block:: python
from trello import TrelloClient
client = TrelloClient(
api_key='your-key',
api_secret='your-secret',
token='your-oauth-token-key',
token_secret='your-oauth-token-secret'
)
Where token
and token_secret
come from the 3-legged OAuth process and
api_key
and api_secret
are your Trello API credentials that are
(generated here <https://trello.com/1/appKey/generate>
_).
To use without 3-legged OAuth, use only api_key
and api_secret
on client.
.. code-block:: python
all_boards = client.list_boards()
last_board = all_boards[-1]
print(last_board.name)
.. code-block:: python
all_boards = client.list_boards()
last_board = all_boards[-1]
last_board.list_lists()
my_list = last_board.get_list(list_id)
for card in my_list.list_cards():
print(card.name)
Make sure the following environment variables are set:
TRELLO_API_KEY
TRELLO_API_SECRET
These are obtained from the link mentioned above.
TRELLO_EXPIRATION
is optional. Set it to a string such as 'never' or '1day'.
Trello's default OAuth Token expiration is 30 days.
Default permissions are read/write.
More info on setting the expiration here: https://trello.com/docs/gettingstarted/#getting-a-token-from-a-user
Run
::
python -m trello oauth
Found in requirements.txt
To run the tests, run python -m unittest discover
. Four environment variables must be set:
TRELLO_API_KEY
: your Trello API keyTRELLO_TOKEN
: your Trello OAuth tokenTRELLO_TEST_BOARD_COUNT
: the number of boards in your Trello accountTRELLO_TEST_BOARD_NAME
: name of the board to test card manipulation on. Must be unique, or the first match will be usedTRELLO_TEST_STAR_COUNT
: the number of stars on your test Trello boardWARNING: The tests will delete all cards on the board called TRELLO_TEST_BOARD_NAME
!
To run tests across various Python versions,
tox <https://tox.readthedocs.io/en/latest/>
_ is supported. Install it
and simply run tox
from the py-trello
directory.
FAQs
Python wrapper around the Trello API
We found that py-trello demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.