Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
xattr is a Python wrapper for extended filesystem attributes.
xattr also ships with an xattr
command line tool for viewing and
editing extended filesystem attributes. On platforms that support or
ship with the attr package, you may prefer to use the getfattr
and setfattr
command line tools from the attr package.
Extended attributes extend the basic attributes of files and directories in the file system. They are stored as name:data pairs associated with file system objects (files, directories, symlinks, etc).
Extended attributes are currently only available on Darwin 8.0+ (Mac OS X 10.4) and Linux 2.6+. Experimental support is included for Solaris and FreeBSD.
Python 3.8+ is required as of v1.0.0, and this is the minimum version that is compatible with Python 3.12+.
Versions older than v1.0.0 are no longer supported, but are available for use. v0.10.1 is the last version to support older versions of Python (including 2.7).
Note: On Linux, custom xattr keys need to be prefixed with the user
namespace, ie: user.your_attr
.
Note: If you need to read or write Spotlight metadata attributes on macOS, see osxmetadata_ which provides a native macOS means to do so without directly manipulating extended attributes. osxmetadata also provides access to other macOS metadata attributes and extended attributes via xattr.
.. _osxmetadata: https://github.com/RhetTbull/osxmetadata
FAQs
Python wrapper for extended filesystem attributes
We found that xattr demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.