Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A separate executable which opens a dialog window for querying user input. Content created dynamically based on JSON spec.
Used in Dialogs library.
The Python project uses pywebview to render the files in the static/
folder.
In order to install the Python and JS dependencies you can use:
poetry run inv install
and then to build the static files once use:
poetry run inv build-js
It is recommended that for development you use the watch command so that the front-end is continously built after each change:
poetry run inv watch-js
Use: poetry run inv test
You will also need a JSON formatted input that will contain the elements to be rendered in the dialog. An example of such a JSON would be: form_with_steps.json
Then the command you use to call the main.py
file will have to contain this JSON alongside the window title and sizes.
A basic example to start a dialog with a heading would be:
python robocorp_dialog/main.py --title Dialog --width 480 --height 100 --auto_height '[{"type":"heading","value":"Send feedback","size":"medium"}]'
FAQs
Dialog for querying user input
We found that robocorp-dialog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.