
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
site24x7
Advanced tools
This repository is dedicaded to ease plugin integrations for site24x7. It contains a set of plugins that can be used to monitor your infrastructure. and in order to install it you need to write below command into your terminal.
pip3 install site24x7 --force-reinstall
ls -l /usr/local/lib/python3/dist-packages/site24x7_plugin_helper
Below lines can be used to integrate your plugin.
import json
from site24x7 import Site24x7_plugin_helper
client = site24x7_plugin_helper.connector.request_client.RequestClient(
author="TechStyleOS",
plugin_version="1"
)
content = client.get('https://www.techstylefashiongroup.com/').content
client.__setitem__("content", content[0:20]) # site24x7 only accepts 20 characters
client.set_metric_types()
print(json.dumps(client.dict))
This bash command is for main.py file, it is dedicated to run the plugin on a jenkins cronjob. It is also an example of how to use.
if pip3 list | grep -F site24x7; then
echo "site24x7 is installed"
else
echo "site24x7 is not installed, installing it right now..."
pip3 install site24x7
fi
SCRIPT_LOCATION=`python3 -c "import site24x7_plugin_helper;print(site24x7_plugin_helper.__file__.replace('__init__.py', 'main.py'))"`
query="select * from testtable"
this_plugin_name="my_testing_plugin"
python3 $SCRIPT_LOCATION \
--plugin=$this_plugin_name \
--query=$query \
--database="mydb" \
--server="myserver" \
--username="myusername" \
--password="mypassword" \
# or you can give an environment for everything or some of them ABOVE
# environment will be picked LAST
--env="///src/site24x7_plugin_helper/.env"
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Below is just neccesary tools and technologies to run this project.
PLUGIN_NAME="testplugin"
echo "installing $PLUGIN_NAME"
mkdir /opt/site24x7/monagent/plugins/$PLUGIN_NAME
mv .env /opt/site24x7/monagent/plugins/$PLUGIN_NAME/.env
mv $PLUGIN_NAME.py /opt/site24x7/monagent/plugins/$PLUGIN_NAME/$PLUGIN_NAME.py
DEVICE_KEY="XXX" # A long authentication key from site24x7.com
sudo wget https://staticdownloads.site24x7.com/server/Site24x7_Linux_64bit.install
sudo chmod 755 Site24x7_Linux_64bit.install
sudo ./Site24x7_Linux_64bit.install -i -key=$DEVICE_KEY
await page.goto('https://site24x7.com/plugins/');
await page.evaulate(()=>{
return document.querySelectorAll(".cursor.ng-scope").length;
}).then(result=>{
console.log(result);
}).catch(error=>{
console.log(error);
}).finally(()=>{
browser.close();
}).then(()=>{
console.log('done');
});
const rows = database.exec(query);
console.log(rows);
// [(0, 'key', 'value'), (1, 'dev', 'renas'), ...rows]
const fs = require('fs');
console.log(fs.readFileSync('/tmp/testplugin.cache', 'utf8'))
// {
// "plugin_version": "2",
// "heartbeat_required": "true",
// "CPU": 100,
// "server": "localhost",
// "database": "testdb",
// "driverLocation": "/usr/local/lib/python3.6/dist-packages/pyodbc/drivers/pyodbc.so",
// "query": "select * from testtable",
// "thisPluginName": "testplugin",
// "key": "value",
// "dev": "renas"
// }
cat /opt/site24x7/monagent/temp/ignored_plugins.txt
from site24x7.utils.zoho import ZohoConnection
_client_id = "xxx"
_client_secret = "xxx"
code ="xxx"
zoho = ZohoConnection(_client_id, _client_secret, code=code)
print(zoho.headers)
zoho.get_current_status_all()
get = zoho.get('/api/current_status')
for i in zoho.get_up_monitors():
print(i['name'], i['status'])
FAQs
plugin integration and zoho authentication 2.0 tool
We found that site24x7 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.