Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Reqboost is a high-performance Python library developed primarily in C++ and built on libcurl. It is designed for developers who need a fast, efficient HTTP client with minimal overhead and extensive control.
Make sure you have libcurl
, poco
( and pkg-config
in case of UNIX-systems) install on your system
sudo apt-get update
sudo apt-get install libcurl4-openssl-dev
sudo apt-get install libpoco-dev
sudo apt-get install pkg-config
sudo apt-get install nlohmann-json3-dev
sudo dnf update
sudo dnf install libcurl-devel
sudo dnf install poco-devel
sudo dnf install pkg-config
sudo dnf install nlohmann-json3-dev
brew install curl
brew install poco
brew install pkgconfig
brew install nlohmann-json
Download the latest Windows binary from the libcurl website and following environment variables.
setx CURL_INCLUDE_DIR "C:\path\to\curl\include"
setx CURL_LIB_DIR "C:\path\to\curl\lib"
setx POCO_INCLUDE_DIR "C:\path\to\poco\include"
setx POCO_LIB_DIR "C:\path\to\poco\lib"
Binaries can be downloaded for UNIX-based systems also
git clone https://github.com/Khushiyant/reqboost.git
cd reqboost
pip install .
Above example will install in root, so try to use virtual environment for installation
pip install git+https://github.com/Khushiyant/reqboost.git
Contributions are welcome! If you find a bug or have a feature request, please open an issue on the Reqboost GitHub repository.
In case, modified code builds are not reflected in final build due to caching of previous builds. Use the following commands:
python setup.py clean --all
python setup.py build_ext --inplace
Reqboost is licensed under the Apache License, Version 2.0. See the LICENSE file for more information.
FAQs
Python package for HTTP requests based on C++ libcurl and Poco
We found that reqboost demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.