Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Download SFTP files using a glob to get all files & also keep a log to keep track of processing
This is project is a class that allows for a glob like sftp download to a temporary file and lets you process the downloaded data using processing_function. The log argument can be used to check if the get and process ran correctly so you can run and not pull files that have already been processed and keeps track of files based on their modified time. This uses threading to separate the glob sftp files and the process function.
Run the following to install:
pip install walk_sftp
from walk_sftp import WalkSFTP
def process(f)
try:
# if successfull
return True
except:
# if unsuccessfull
return False
WalkSFTP(
ftp_web_address,
username,
password,
start_date='2020-12-25', # optional
end_date='2020-12-28', # optional
print_out=True, # optional
processing_function=process, # optional
log='/some_path_to_log.p', # optional
)
To install walk_sftp, along with the tools you need to develop and run tests, run the following in your virtualend:
$ pip install -e .[dev]
FAQs
Download SFTP files using a glob to get all files & also keep a log to keep track of processing
We found that walk-sftp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.