Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The Zurich Instruments drivers for QCoDeS (zhinst-qcodes) is a package of instrument drivers for devices produced by Zurich Instruments for QCoDeS. QCoDeS is a Python-based data acquisition framework developed to serve the needs of nanoelectronic device experiments, but not limited to that. It is intended to be used within QCoDeS and not as standalone package. The QCoDeS instrument drivers are based on the Zurich Instruments Toolkit. So if you are looking for a framework independent high level python API, zhinst-toolkit it the right place for you.
The zhinst-qcodes is well tested and considered stable enough for general usage. The interfaces may have some incompatible changes between releases. Please check the changelog when updating.
Version 0.3 is a more or less complete new driver and breaks the API compared to the previous version in many ways. If you upgrade from an older version take a look at the dedicated documentation page for more information.
Install the package with pip:
pip install zhinst-qcodes
See the documentation page here. Since zhinst-qcodes is based on zhinst-toolkit and has exactly the same interface and functions, the documentation for zhinst-toolkit can be applied nearly one to one and has much more examples.
We welcome contributions by the community, either as bug reports, fixes and new code. Please use the GitHub issue tracker to report bugs or submit patches. Before developing something new, please get in contact with us.
This software is licensed under the terms of the MIT license. See LICENSE for more detail.
FAQs
Zurich Instruments drivers for QCoDeS
We found that zhinst-qcodes demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.