Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Calagator is an open source community calendaring platform:
By releasing this code under a liberal MIT open source license, we hope to empower other people so they can better organize and participate in more events that support free sharing of information, open society, and involved citizenry.
Read the INSTALL.md file for details on installing the software.
Bug fixes and features are welcomed. Please fork the source code and submit a pull request: http://github.com/calagator/calagator/tree/main
When you make a pull request, make sure to add your name to the list of contributors in CONTRIBUTORS.md.
All Calagator contributors are expected to read and follow our code of conduct.
This free, open source software was made possible by a group of volunteers that put many hours of hard work into it. See the CONTRIBUTORS.md file for details.
This program is provided under an MIT open source license, read the MIT-LICENSE.txt file for details.
Copyright (c) 2007-2021 Calagator
FAQs
Unknown package
We found that calagator2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.