
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
An async Python client for Sendou.ink
pip install sendou.py
import sendou
import asyncio
async def run():
client = sendou.Client("API_KEY")
player = await client.get_user("USER_ID")
print(player.name)
asyncio.run(run())
To use this library, you must have an API key. You need to DM Sendou for an API Key currently.
For development, you'll need Poetry installed for dependency management and building distributions
When install dependencies for development run
poetry install --with=dev
In CI you way want to run poetry install --with=dev,ci
that includes CI dependencies for GitHub Actions
This package has some tests, these are written with pytest and can be run with
pytest
You likely need to run poetry install
before executing pytest
This package uses sendou.ink's Public API Schema
file to design the models uses in the package. To keep track of where the package is in relation to the upstream schema,
the commit sha of the upstream schema is kept in the pyproject.toml
file under tool.sendou-py.source
.
There are 2 scripts that help keep this package inline with the upstream schema.
This script uses the GitHub API to check that the SHA stored in tool.sendou-py.source
matches the latest commit for
for the upstream schema.
python3 scripts/checkUpstreamSchema.py
This script pulls down the latest SHA hash for the upstream schema and saves it to the pyproject.toml
file
python3 scripts/updateUpstreamSchema.py
This should only be run after dev has checked their changes match the upstream schema
FAQs
An async Python library for Sendou.ink
We found that sendou-py demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.