Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
s3io is a minimalistic python module which provides file object access to data on S3.
All data manipulations are done via temporary local files - so you will actually work with local temp file which is a file object with all its methods supported.
Just keep in mind these facts:
flush
will not influence the process of saving to S3.boto <https://github.com/boto/boto>
_s3io is intended to be used via context manager only.
There are three ways to provide access to s3:
s3_connection
.aws_access_key_id
and aws_secret_access_key
.profile_name
. This method is recommended to use. See boto docs <http://boto.readthedocs.org/en/latest/boto_config_tut.html>
_ for more info.Reading file using existing S3 connection::
import s3io
s3 = boto.connect_s3()
with s3io.open('s3://<bucket>/<key>', s3_connection=s3) as s3_file:
contents = s3_file.read()
Reading file using credentials::
credentials = dict(
aws_access_key_id='<ACCESS_KEY>',
aws_secret_access_key='<SECRET_KEY>',
)
with s3io.open('s3://<bucket>/<key>', **credentials) as s3_file:
contents = s3_file.read()
Reading file using profile::
with s3io.open('s3://<bucket>/<key>', profile_name='<profile>') as s3_file:
contents = s3_file.read()
Writing file using profile::
with s3io.open('s3://<bucket>/<key>', mode='w', profile_name='<profile>') as s3_file:
s3_file.write('Some data.')
Possible exceptions:
FAQs
Access resources on Amazon S3 as a File Object.
We found that s3io demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.