
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
wagtail-simple-gallery
Advanced tools
Is an extension for Torchbox's Wagtail CMS for creating a simple image gallery either by creating a page using the template or a templatetag.
Current version works with Wagtail 5.0.x - 6.3.x & Django 4.2.x - 5.1.x.
For older Wagtail/Django versions check the v0.10.1 release.
pip install wagtail-simple-gallery.wagtail_simple_gallery to INSTALLED_APPS in your project settings.python manage.py migrate wagtail_simple_gallery.[<number>] into their title: "[00004] Cute cat".SIMPLE_GALLERY_TEMPLATEYou can override the SimpleGalleryIndex page template with this setting. Default: wagtail_simple_gallery/simple_gallery_index.html
SIMPLE_GALLERY_ADMIN_URL_ROOTYou can use this with the Admin Interface if you use something other than "admin" for accessing the cms admin panel. Default: admin
SIMPLE_GALLERY_PAGE_TYPEThe page type presented to a Wagtail CMS user can be adjusted with this setting. Default: Gallery index.
{% load wagtailsimplegallery_tags %}
{% simple_gallery %} inclusion tagUses the template wagtail_simple_gallery/simple_gallery.html. You can use the simple-gallery style with this tag using: <link rel="stylesheet" href="{% static 'css/simple-gallery.css' %}">.
collection (default: None): Show images from this collection. Required, example: {% simple_gallery collection="Root" %}.tags (default: None): Filter images by their tags. Example: {% simple_gallery tags="cats dogs" %}.image_limit (default: None): Limit the amount of images to show. Example: {% simple_gallery image_limit=4 %}.use_lightbox (default: True): Use lightbox for viewing images. Example: {% simple_gallery use_lightbox=False %}.{% img.alt|hide_num_order %} filter[<number>] in the image title. E.g "[0010] Cute cat" -> "Cute cat"Look at simple_gallery_index.html template for an example or copy paste it and start modifying to make it look a part of your page. Your custom simple_gallery_index.html template should reside in /templates/wagtail_simple_gallery/simple_gallery_index.html
Or if simple_gallery_index.html is good enough for your use, then you can just create a simple_gallery_base.html in your own templates directory with the following content:
{% extends "base.html" %}
{% block content %}{% endblock %}
It is suggested to take advantage of the existing Wagtail setting:
WAGTAILIMAGES_INDEX_PAGE_SIZE = 32
FAQs
A simple gallery app for Wagtail.
We found that wagtail-simple-gallery demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.