Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The smartest bot for telegram/slack
Smartbot is a python library that helps to write enhanced bots to Telegram / Slack. The concept of behaviours makes easier to add costumizable features to your bot. Some features are already built-in in this package like:
You can install the through pip:
pip install smartbot
or inside directory (in case you downloaded the code):
python setup.py install
usage: smartbot_full.py [-h] [--telegram-bot-token TELEGRAM_BOT_TOKEN]
[--slack-bot-token SLACK_BOT_TOKEN]
[--wolfram-app-id WOLFRAM_APP_ID]
[--admin-id ADMIN_ID] [--config CONFIG]
Run smartbot
optional arguments:
-h, --help show this help message and exit
--telegram-bot-token TELEGRAM_BOT_TOKEN
The telegram bot token (or
env[SMARTBOT_TELEGRAM_TOKEN])
--slack-bot-token SLACK_BOT_TOKEN
The slack bot token (or env[SMARTBOT_SLACK_TOKEN])
--wolfram-app-id WOLFRAM_APP_ID
The wolfram app id (or env[SMARTBOT_WOLFRAM_APPID])
--admin-id ADMIN_ID The user id to admin (or env[SMARTBOT_ADMIN_ID])
--config CONFIG The configuration file (or env[SMARTBOT_CONFIG])
You are free to contribute with this project and even fork it. Of cource, following the license instructions. We will be available as much as possible to solve any doubts or issues about this project.
The code and wiki documentation are in development. The test suite is not that perfect, but we are in a pursuit to improve it. Manual tests confirm the project is stable enough to be in a public repository. Enjoy
FAQs
The most smart bot in telegram and slack
We found that smartbot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.