Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
This library contains common proto messages that are used in all th2 components.
See common.proto
file for details.
Tool generates code from .proto
files and uploads built packages (.proto
files and generated code) to specified
repositories.
gradle.properties
file.package_info.json
file.If you wish to manually create and publish a package for Java, run the following command:
gradle --no-daemon clean build publish artifactoryPublish \
-Purl=${URL} \
-Puser=${USER} \
-Ppassword=${PASSWORD}
URL
, USER
and PASSWORD
are parameters for publishing.
If you wish to manually create and publish a package for Python:
Gradle
:
gradle --no-daemon clean generateProto
You can find the generated files by following path: src/gen/main/services/python
.proto
files and publish everything using twine
:
pip install -r requirements.txt
pip install twine
python setup.py generate
python setup.py sdist
twine upload --repository-url ${PYPI_REPOSITORY_URL} --username ${PYPI_USER} --password ${PYPI_PASSWORD} dist/*
PYPI_REPOSITORY_URL
, PYPI_USER
and PYPI_PASSWORD
are parameters for publishing.check_simple_collections_order
parameter to RootComparisonSettings
reserved
timestamp
from MessageMetadata
/RawMessageMetadata
to MessageID
start_timestamp
from Event
to EventID
book_name
to MessageID
and EventID
scope
to EventID
map<string, SessionAliasToDirectionCheckpoint>
to Checkpoint
. It describes book to session alias to
direction.EventBatchMetadata
and MessageGroupBatchMetadata
with external_queue
propertyth2-bom
version from '3.0.0' to '4.1.0'grpcio-tools
Python dependency version from 1.38.1
to 1.50.0
grpc
Java dependency version from 1.32.1
to 1.50.2
mypy-protobuf
Python dependency version from 2.5
to 3.2
session_group
parameter to ConnectionID
null_value
in ValueFilter
. Should be used only with EQUAL and NOT_EQUAL operations.time_precision
and decimal_precision
parameters to RootComparisonSettings
EQ_TIME_PRECISION
and EQ_DECIMAL_PRECISION
filter operation, witch filter a field by comparing
values(date/time
in ISO format and numeric
types) with the precision. The timestamps will be compared with the
protobuf duration format. Numbers use string format, for example 0.0001, 0.125, 125E-3check_repeating_group_order
parameter to RootComparisonSettings
description
parameter to RootMessageFilter
.IN
and NOT_IN
filter operation, which filter a field by value from list of String
.LIKE
and NOT_LIKE
filter operation, which filter a field by String
regEx expression.MORE
, LESS
, NOT_MORE
, NOT_LESS
filter operations, which filter a field by comparing values(numeric
types and date/time
in ISO format).WILDCARD
and NOT_WILDCARD
filter operations, which filter a field by String
specified wildcard
expression. The wildcard matcher uses the characters ?
and *
to represent a single or multiple (zero or more)
wildcard characters. This is the same as often found on Dos/Unix command lines.N.B. the sequence *?
does not work properly at present in match strings.
FAQs
th2_grpc_common
We found that th2-grpc-common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.