
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Audio Transcription & Translation Desktop GUI
Powered by OpenAI's Whisper and MarianMT
Audio Transcription
Convert WAV/MP3/M4A files to text using 5 Whisper model sizes
tiny
| base
| small
| medium
| large
Text Translation
Supports multiple languages including:
System Monitoring
Real-time CPU/RAM/GPU usage stats
Cross-Platform
Windows installer available ⢠Python package for developers
Download the installer (160MB) from GitHub Releases
WhispaApp-Setup.exe
# 1. Install CPU-optimized PyTorch (Windows)
pip install torch --index-url https://download.pytorch.org/whl/cpu
# For other platforms, use:
pip install torch
# 2. Install Whispa App
pip install whispa_app==2.2.0
# 3. Download models (first time)
whispa --prefetch
# 4. Launch GUI
whispa
Setting | Description |
---|---|
VRAM Threshold | Minimum GPU memory for acceleration |
Beam Size | Balance speed vs accuracy |
VAD Filter | Skip silent segments |
Language | Source language (auto-detect if not specified) |
Translation Model | Choose between different translation models |
Whispa_App/
āāā src/ # Source code
ā āāā whispa_app/ # Core modules
ā āāā assets/ # Icons
ā āāā ui/ # GUI components
ā āāā *.py # Functionality
āāā installer/ # Inno Setup script
āāā Releases/ # Windows installers
git checkout -b feature/new-feature
git commit -m "Add awesome feature"
git push origin feature/new-feature
Note: Include tests for new features!
MIT License - Full Text
Copyright Ā© 2025 Damilare Eniolabi
Report Issues ⢠Contact
FAQs
GUI for Whisper transcription & MarianMT translation
We found that whispa-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.