Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Attys is a lightweight wearable bluetooth data acquisition box which can measure anything from temperature to ECG.
It's cross platform and runs under Linux and Windows
It has two 24 bit analogue channels, an accelerometer and a magnetometer.
For Ubuntu Linux install libbluetooth-dev and swig::
sudo apt-get install libbluetooth-dev swig
Here are the basic steps how to use the API::
# load the module
import pyattyscomm
# Gets the AttysScan class which scans for Attys via bluetooth
s = pyattyscomm.AttysScan()
# Scan for Attys
s.scan()
# get the 1st Attys
c = s.getAttysComm(0)
# create a datacallback
class AttysCommCallback(pyattyscomm.SampleCallback):
def hasSample(self,t,v):
print(t,v) # so more than just printing!
cb = AttysCommCallback()
pyattyscomm.connectCallback(c,cb)
# Start data acquisition in the background
c.start()
# sleep here or start a GUI
# end the acqu
c.quit()
Query it via the python help system::
import pyattyscomm
help(pyattyscomm)
The Python classes have been generated with SWIG. The header files AttysComm.h, AttysCommBase,h and AttysScan.h provide detailed info about the classes:
https://github.com/glasgowneuro/attys-comm
On github are python examples which show you how to plot realtime data from the Attys: https://github.com/glasgowneuro/attys-comm/tree/master/examples
FAQs
API for the bluetooth Attys DAQ box (www.attys.tech)
We found that pyattyscomm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.