Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Current Version: 0.1.6
The Securities & Exchange Commission (SEC) has a treasure trove of business data available to indviduals for free. However, the biggest obstacle to getting this free data boils down to two challenges:
The Python SEC library (edgar
) is designed to make the collection and the extraction of SEC data quick
and effortless. The library was designed around some of the following goals:
Setup - PyPi Install:
To install the library, run the following command from the terminal.
pip install python-sec
Setup - PyPi Upgrade:
To upgrade the library, run the following command from the terminal.
pip install --upgrade python-sec
Setup - Local Install:
If you are planning to make modifications to this project or you would like to access it
before it has been indexed on PyPi
. I would recommend you either install this project
in editable
mode or do a local install
. For those of you, who want to make modifications
to this project. I would recommend you install the library in editable
mode.
If you want to install the library in editable
mode, make sure to run the setup.py
file, so you can install any dependencies you may need. To run the setup.py
file,
run the following command in your terminal.
pip install -e .
If you don't plan to make any modifications to the project but still want to use it across your different projects, then do a local install.
pip install .
This will install all the dependencies listed in the setup.py
file. Once done
you can use the library wherever you want.
Setup - PyPi Install:
To install the library, run the following command from the terminal.
pip install python-sec
Setup - PyPi Upgrade:
To upgrade the library, run the following command from the terminal.
pip install --upgrade python-sec
Here is a simple example of using the edgar
library to grab different groups of filings.
from pprint import pprint
from edgar.client import EdgarClient
from edgar.enums import StateCodes
from edgar.enums import CountryCodes
from edgar.enums import StandardIndustrialClassificationCodes
# Initialize the Edgar Client
edgar_client = EdgarClient()
# Initialize the Company Services.
company_services = edgar_client.companies()
# Grab all the companies that are based in Texas.
pprint(company_services.get_companies_by_state(state_code='TX'))
# Alternatively, if you didn't know the 2 letter code you could pass through an Enum.
pprint(
company_services.get_companies_by_state(
state_code=StateCodes.West_Virginia
)
)
# Grab all the companies that are based in Australia, same logic here with the Enums.
pprint(
company_services.get_companies_by_country(
country_code=CountryCodes.AUSTRALIA
)
)
Patreon: Help support this project and future projects by donating to my Patreon Page. I'm always looking to add more content for individuals like yourself, unfortuantely some of the APIs I would require me to pay monthly fees.
YouTube: If you'd like to watch more of my content, feel free to visit my YouTube channel Sigma Coding.
Questions: If you have questions please feel free to reach out to me at coding.sigma@gmail.com
FAQs
A client library for collecting and scraping SEC filings.
We found that python-sec demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.