
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Welcome to the pysyncml
library, a pure-python implementation of
the SyncML adapter framework and protocol. SyncML_ is a protocol to
synchronize opaque objects between multiple clients and a
server. Although pysyncml does provide some utilities to synchronize
certain types of content and is therefore useful as-is, it is
primarily intended to be used as a library by other applications that
want to add data synchronization support via SyncML.
.. important::
2013/12/15: pysyncml is currently beta. That means it has not had much "real-world" experience and you may encounter many bugs. However, it is being actively developed, so check back in a couple of months.
If you decide to use it anyway, you are strongly encouraged to do a full backup of your data before you use pysyncml to synchronize production data.
Working components as of 0.2.0:
Client-side SyncML framework with support for CRUD operations, i.e. Add/Replace/Delete Sync commands.
Server-side SyncML framework with support for CRUD operations, i.e. Add/Replace/Delete Sync commands, BUT it is not recommended to use server-side yet, as some API changes are expected.
Server-side conflict detection and multi-policy resolution.
Native support for "note" datatype.
The pysyncml project has the following goals, some of them diverge critically from other SyncML implementations and are the reasons for creating a new package instead of building on other existing implementations:
pip install pysyncml
"
(or easy_install).It is the goal of the project to get a minimally functional library going in the shortest possible timeframe. To that end, the following features of SyncML will NOT be implemented until a later phase, even if this means that the library does not provide a conformant implementation:
Installation of pysyncml is near-trivial with PIP_:
.. code-block:: bash
$ pip install pysyncml
or, using easy_install_:
.. code-block:: bash
$ easy_install pysyncml
Python 2.7 or better is required, as the following is "taken for granted" by the pysyncml developers:
For downloaded packages, please see the generated documents in the "doc" directory, otherwise you can find links to the latest how-to and API reference documentation at pysyncml_.
.. _SyncML: http://en.wikipedia.org/wiki/SyncML .. _SQLAlchemy: http://www.sqlalchemy.org .. _PIP: http://www.pip-installer.org .. _easy_install: http://peak.telecommunity.com/DevCenter/EasyInstall .. _pysyncml: http://www.pysyncml.org
FAQs
A pure-python implementation of the SyncML adapter framework and protocol.
We found that pysyncml demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.