Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
SDK for interacting with Geewiz. Works with Ruby 2.6 (the version that currently come preinstalled on MacOS) and above.
bundler
To start a new project using MacOS's preinstalled Ruby:
Make a new directory for your project
mkdir my-new-project
cd my-new-project
Configure Bundler to use the vendor/bundle
directory for your gems instead of installing them system wide, which requires root access:
bundle config --local path vendor/bundle
# Ignore the bundled gems in git
echo /vendor/ >> .gitignore
Create a new Gemfile
# Make a new Gemfile
bundle init
# Add the gem to the Gemfile
bundle add geewiz
To use the gem in your project:
require 'bundler/setup'
require 'geewiz'
Geewiz.card "hello-world-card"
bundle add geewiz
or
gem install geewiz
require 'bundler/setup' # you may need to require this if you're using bundler
require 'geewiz'
# show a card with the id "my_card_id"
result = Geewiz.card :my_card_id
result = Geewiz.card "another-card-id" # all data going to Geewiz is json encoded, so either symbols or strings are fine
# show a card with the id "my_card_id" override `type` and `selectOne` parameters
result = Geewiz.card :my_card_id, type: "selectOne", items: ["one", "two", "three"]
# show a card with no id
result = Geewiz.card type: "selectOne", items: ["one", "two", "three"]
# `vars:` can be used to send variables to Geewiz before showing a card
# (it's a bit cleaner than using `Geewiz.vars[]=` directly)
result = Geewiz.card :my_card, vars: { my_var: "my value", another_var: "another value" }
# if card doesn't have an input, or you don't need the input:
Geewiz.card :my_card_without_input
Geewiz.vars[:my_var] = "my value"
Geewiz.vars['my-var-with-dashes'] = "my value" # strings are fine as variable names
# you can use the variables in Ruby
Geewiz.vars[:username] = load_username_from_db
if Geewiz.vars[:username] == 'nicholaides'
# ...
end
# this also works for setting one variable
Geewiz.var :my_var, "my value"
Geewiz.set title: "my app"
config_value = Geewiz.get_user_config :my_key
Geewiz.card :my_card_id
geewiz = Geewiz::Client.new
geewiz.set title: "my app"
geewiz.vars[:my_var] = "my value"
result = geewiz.card :my_card_id
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that geewiz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.