
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
ezlinkedin
Advanced tools
A simple way to make calls on Linkedin's API. NOTE: It is not yet completed and does not encompass all of the api at this time. It serves the purpose I made it for but I will continue to develop it.
This is heavily inspired and influenced by the pengwynn/linkedin gem. I was having issues with his gem though and there is very little documentation for using it so I decided to redo it myself in order to:
Most of the tests are from pengwynn's gem
Add this line to your application's Gemfile:
gem 'ezlinkedin'
And then execute:
$ bundle
Or install it yourself as:
$ gem install ezlinkedin
This is meant to be used alongside omniauth. Obtain access tokens from omniauth authentication and then use them to make api calls.
require 'ezlinkedin'
# Create a client
linkedin = EzLinkedin::Client.new("API KEY", "SECRET KEY", options) # options are the typical OAuth consumer options
linkedin.authorize("access_token", "access_token_secret") # tokens obtained from omniauth
# make calls on linkedin
linkedin.profile(id: 1234, fields: ['name', 'email']
linkedin.connections(count: 30)
linkedin.network_updates(types: [:shar, :prfx, :conn], count: 50)
linkedin.post_share({:comment => "I'm a comment",
:content => { :title => "A title!",
:description => "A description",
:submitted_url => "http...",
:submitted_image_url => "http..." },
:visibility => { :code => "anyone"} })
linkedin.search(company: ['id', 'name'], keywords: 'apple')
linkedin.search(people: ['first-name', 'id'], last_name: 'johnson')
Currently, one can: * post shares * retrieve network updates, user profile, and connections * search for companies and people * use the company and people search api
I'd really like to include the facets capabilities in the search because it would really boost search efficiency.
This gem fits the purposes I had for it and I'm satisfied. Besides implementing Faceted search, I don't plan on implementing other features at this point. But feel free to contribute
git checkout -b my-new-feature)git commit -am 'Add some feature')git push origin my-new-feature)FAQs
Unknown package
We found that ezlinkedin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.