Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The All-Purpose Experimenter
is a plugin-based system meant to create a unified front-end for different device-related testing.
If you have the repository you can install it by using the setup.py
file.
.. code:: bash
python setup.py install
Alternately you can pull it from Pypi.
.. code:: bash
pip install theape
If you are installing it system-wide you will probably have to prefix this and other install commands with sudo
.
The APE has some online help.
.. code:: bash
ape -h
::
APE (the all-purpose-evaluator)
Usage: ape -h | -v
ape [--debug|--silent] [--pudb|--pdb] <command> [<argument>...]
ape [--debug|--silent] [--trace|--callgraph] <command> [<argument>...]
Help Options:
-h, --help Display this help message and quit.
-v, --version Display the version number and quit.
Logging Options:
--debug Set logging level to DEBUG.
--silent Set logging level to ERROR.
Debugging Options:
--pudb Enable the `pudb` debugger (if installed)
--pdb Enable the `pdb` (python's default) debugger
--trace Enable code-tracing
--callgraph Create a call-graph of for the code
Positional Arguments:
<command> The name of a sub-command (see below)
<argument>... One or more options or arguments for the sub-command
Available Sub-Commands:
run Run a plugin
fetch Fetch a sample configuration-file
help Display more help
list List known plugins
check Check a configuration
To get help for a sub-command pass `-h` as the argument. e.g.:
ape run -h
The APE is currently being tested using behave <http://pythonhosted.org/behave/>
_ so if you want to run the tests, you'll need that, pyhamcrest <http://pyhamcrest.readthedocs.org/en/1.8.0/>
_ and mock <http://mock.readthedocs.org/en/latest/magicmock.html>
_. All three are on pypi so if you have pip installed you can install them from the web (if installing system wide run as root).
.. code:: bash
pip install behave pip install pyhamcrest pip install mock
FAQs
The All-Purpose Experimenter.
We found that theape demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.