
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
ViUR is an application development framework for the Google App Engine™.
ViUR was developed to meet the needs and requirements of both designers and developers. It provides a clear concept for the implementation of agile data management software systems. It is written in Python™ and has already attracted a growing community that is constantly supporting and improving ViUR.
To get started with ViUR, check out viur-base. It comes with a pre-configured and well documented project template to immediately start with.
The package contains a service tool viur-migrate
to migrate existing project sources to the current viur-core
, by replacing old namings and config variables by their newer counterparts.
After checking the result with viur-migrate ./deploy/ -d
you can apply the changes with viur-migrate ./deploy/ -x
.
Help of any kind to extend and improve or enhance this project in any kind or way is always appreciated.
We take great interest in your opinion about ViUR. We appreciate your feedback and are looking forward to hear about your ideas. Share your vision or questions with us and participate in ongoing discussions.
See our contribution guidelines for details.
Copyright © 2025 by Mausbrand Informationssysteme GmbH.
Mausbrand and ViUR are registered trademarks of Mausbrand Informationssysteme GmbH.
Licensed under the MIT license. See LICENSE for more information.
FAQs
The core component of ViUR, a development framework for Google App Engine
We found that viur-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.