
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
Copyright (c) 2008 - 2011 Howcast Media Inc.
$ sudo gem install howcast
require 'rubygems'
require 'howcast'
hc = Howcast::Client.new(:key => "INSERT API KEY HERE")
# Will print out the video titles of the first page of recent howcast studios videos
puts "Recent Howcast Studios Videos"
hc.videos.each do |v|
puts v.title
end
puts "2nd Page of Top Rated Videos"
# Will print out the video titles of the 2nd page of top rated videos
hc.videos(:page => 2, :sort => "top_rated", :filter => "all").each do |v|
puts v.title
end
puts "Videos matching 'origami'"
hc.search("origami").each do |v|
puts v.title
end
puts "Video with id 946"
puts hc.video(946).title
# Category API
piano = hc.category(1105)
puts "The parent category of Piano is #{hc.category(piano.parent_id).name}"
ancestors = piano.parents.map{|c| c[:name]}
# Ancestors will be an array of hash metadata:
# => [{:name=>"Performing Arts", :id=>"1048"},
# {:name=>"Musical Instruments", :id=>"1095"},
# {:name=>"Keyboards", :id=>"1103"}]
puts "The ancestors of piano are: #{ancestors.join(" -> ")}"
$ git clone git://github.com/howcast/howcast-gem.git
$ cd howcast-gem $ bundle install
$ bundle exec rake spec
$ bundle exec rake -T
$ mate .
$ bundle exec rake spec
$ echo "X.X.X" > VERSION
$ git commit -a -m 'Blah-blah-blah' $ git push
$ bundle release
FAQs
Unknown package
We found that howcast demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.