
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
slider-captcha-match
Advanced tools
Slider Captcha Match 是一个基于 Python 和 OpenCV 的滑块验证码匹配工具,旨在通过对比滑块和背景图像来计算滑块的正确偏移量。该项目主要用于验证图像处理和匹配算法。
Slider Captcha Match 是一个基于 Python 和 OpenCV 的滑块验证码匹配工具,旨在通过对比滑块和背景图像来计算滑块的正确偏移量。该项目主要用于验证图像处理和匹配算法。
.
├── README.md
├── data
│ ├── bg3.jpeg
│ ├── output
│ └── slider3.png
├── pyproject.toml
├── requirements.txt
├── src
│ ├── __init__.py
│ └── slider_captcha_match.py
└── tests
├── __pycache__
└── test_slider_match.py
git clone https://github.com/ityangs/slider-captcha-match.git
cd slider-captcha-match
python -m venv venv
source venv/bin/activate # 在 Windows 上使用 `venv\Scripts\activate`
pip install -r requirements.txt
or
mamba create -n slider-captcha-match python=3.10
mamva activate slider-captcha-match
pip install -r requirements.txt
SlideCaptchaMatch 类包含了进行滑块匹配的核心方法。
from src.slider_captcha_match import SliderCaptchaMatch
processor = SliderCaptchaMatch(save_images=True, output_path="output")
# 通过图像路径获取滑块偏移量
offset = processor.get_slider_offset("data/bg3.jpeg", "data/slider3.png")
print(f"Offset (paths): {offset}")
# 通过 base64 编码获取滑块偏移量
background_base64 = "..." # base64 编码的背景图像
slider_base64 = "..." # base64 编码的滑块图像
offset = processor.get_slider_offset(background_base64, slider_base64)
print(f"Offset (base64): {offset}")
项目包含基本的测试代码,测试代码位于 tests/test_slide_match.py 中,包含了两种测试方法: 通过路径获取滑块偏移量。 通过 base64 编码获取滑块偏移量。 可以直接运行测试文件来查看效果:
python tests/test_slider_match.py
如果你有兴趣为本项目做贡献,请遵循以下步骤:
1. Fork 本仓库
2. 创建你的 feature 分支 (`git checkout -b feature/fooBar`)
3. 提交你的修改 (`git commit -am 'Add some fooBar'`)
4. 推送到分支 (`git push origin feature/fooBar`)
5. 创建一个新的 Pull Request
此项目基于 MIT 许可证,详情请参阅 LICENSE 文件。
如果你有任何问题或建议,请通过电子邮件联系我们:ityangs@163.com
FAQs
Slider Captcha Match 是一个基于 Python 和 OpenCV 的滑块验证码匹配工具,旨在通过对比滑块和背景图像来计算滑块的正确偏移量。该项目主要用于验证图像处理和匹配算法。
We found that slider-captcha-match demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.