Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
| DEPRECATION NOTICE: this library is not actively maintained, please consider using the Python library which was made by XRPLF <https://xrplf.org/>
and which is maintained. You can find information about this library via links below:
| xrpl-py on Github <https://github.com/XRPLF/xrpl-py>
_
| xrpl-py on PyPI <https://pypi.org/project/xrpl-py/>
_
|
| python-ripple-lib is a client library to access Ripple rippled API <https://developers.ripple.com/rippled-api.html>
_ and Data API <https://developers.ripple.com/data-api.html>
_.
| Currently it supports public and admin methods (some of them still are work in progress though). List of implemented methods is displayed below. Basically, it's just a wrapper on top of http requests made to API.
Available on PyPi <https://pypi.org/project/python-ripple-lib/>
_
To install the package from PyPi run the following command
::
pip install python-ripple-lib
If you want to install package from this repo, use setup.py
::
python setup.py install
If you want to install package just for development purposes, use another command
::
python setup.py develop
This command creates symlinks to package files instead of copying it to package directory
| Most of JSON-RPC methods are implemented inside, for the full list of methods please refer to list of Public <https://developers.ripple.com/public-rippled-methods.html>
_ and Admin <https://developers.ripple.com/admin-rippled-methods.html>
_ methods from ripple documentation
| How to use:
.. code-block:: python3
from ripple_api import RippleRPCClient
# module supports authentication as well
rpc = RippleRPCClient('http://s1.ripple.com:51234/', username='<username>', password='<password>')
account_info = rpc.account_info('r9cZA1mLK5R5Am25ArfXFmqgNwjZgnfk59')
| Most of Data API requests are implemented here as well, fll list located in here <https://developers.ripple.com/data-api.html>
_
| How to use:
.. code-block:: python
from ripple_api import RippleDataAPIClient
api = RippleDataAPIClient('https://data.ripple.com')
identifier = '3170DA37CE2B7F045F889594CBC323D88686D2E90E8FFD2BBCD9BAD12E416DB5'
query_params = dict(transactions='true')
ledger_info = api.get_ledger(ledger_identifier=identifier, **query_params)
| Example of get_transactions() query:
.. code-block:: python
from ripple_api import RippleDataAPIClient from pprint import pprint
api = RippleDataAPIClient('https://data.ripple.com')
query_params = dict(type="Payment") txs = api.get_transactions(**query_params) pprint(txs)
Send XRP from address tp address via Account instance:
.. code-block:: python
from ripple_api import Account
taker = 'rYuHe4VogMzYmvHpSsgGxRH97UvqumgER'
issuer = 'rMEmLrfkfooLjdkerU5TKTcAVpfy9fpSxt'
seed = '<account_seed>'
account = Account('http://localhost:5005', issuer, seed)
tx_info = account.send_xrp(issuer=issuer, taker=taker, secret=seed, amount=10)
::
make test
or
::
python -m unittest -v
5. If tests are successful and everything is OK, commit to your local fork 6. Submit a pull request to this repo
FAQs
Ripple JSON-RPC API and Data API wrapper for Python
We found that python-ripple-lib demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.