
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
SWAN extension to show an information pop up to new users.
This extension is composed of a Python package named swanintro
, which installs the nbextension and a NPM package named @swan-cern/swanintro
for the JupyterLab extension.
Note: You will need NodeJS to install the extension.
pip install swanintro
jupyter nbextension install swanintro --py
jupyter nbextension enable swanintro --py
jupyter lab build
If you are not seeing the frontend, check if it's installed:
jupyter labextension list
If it is installed, try:
jupyter lab clean
jupyter lab build
The jlpm
command is JupyterLab's pinned version of
yarn that is installed with JupyterLab. You may use
yarn
or npm
in lieu of jlpm
below.
# Clone the repo to your local environment
# Move to swanintro directory
# Install server extension
# This will also build the js code
pip install -e .
# Install and enable the nbextension
jupyter nbextension install swanintro --py --sys-prefix
jupyter nbextension enable swanintro --py --sys-prefix
# Link your development version of the extension with JupyterLab
jupyter labextension link .
# Rebuild JupyterLab after making any changes
jupyter lab build
# Rebuild Typescript source after making changes
jlpm build
# Rebuild JupyterLab after making any changes
jupyter lab build
You can watch the source directory and run JupyterLab in watch mode to watch for changes in the extension's source and automatically rebuild the extension and application.
# Watch the source directory in another terminal tab
jlpm watch
# Run jupyterlab in watch mode in one terminal tab
jupyter lab --watch
pip uninstall swanintro
jupyter labextension uninstall @swan-cern/swanintro
FAQs
Information popup for SWAN
We found that swanintro demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.