
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
wind-parser
Advanced tools
Python wind parser is a parser used to retrieve arguments for command line interfaces and turn them into python dictionary
Python wind parser is a parser used to retrieve arguments for command line interfaces and turn them into python dictionary.
This parser was created for the speed framework.
Installation with pip :
$ pip install wind-parser
After installing wind-parser you can just instantiate the Parser class with sys.argv as argument (sys.argv isn't required but it's better for the code clarity)
Here is an example of how the parser is used:
# command.py
import sys
from wind_parser import Parser
parser = Parser(sys.argv) # This variable stores the arguments with their values in a python dictionary
if __name__ == '__main__':
print(parser) # Print the dictionary
Note : You can also use
p.argsfor printing the dictionary
Then you can run in your terminal:
$ python command.py --name=John --age=32 --hobbies Football,Basketball,Cinema --verbose
Output:
{'name':'John', 'age':'32', 'hobbies': ['Football', 'Basketball', 'Cinema'], 'verbose':True}
To access the value of an argument, you can choose between:
print(p['name'])
# or
print(p.args['name'])
print(p.name)
Note : With this method, you will not be able to retrieve arguments with a
-in its name.
The different types of arguments supported:
-a 1, --a=1, -a item1,item2,item3--verbose, -v, --helpHere are the types of the different possible values depending on the type of argument:
| Arguments | Python type |
|---|---|
--name=John or --age 16 | str |
--verbose or -v | bool (always True) |
--files main.py,m.cfg,test.txt | list[str] |
FAQs
Python wind parser is a parser used to retrieve arguments for command line interfaces and turn them into python dictionary
We found that wind-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.