
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Mandy hides the differences and complexities between running map/reduce tasks locally or distributed or in test environments.
It provides a simple DSL to define new jobs for distribution. See examples/word_count.rb for a demo of some functionality. Run the word count example locally with...
mandy-local examples/word_count.rb examples/alice.txt examples/output
Mandy more examples can be found at http://github.com/trafficbroker/mandy-lab
We are very light on documentation at the moment we are aware of the problem and are working hard to rectify it.
Mandy is licensed under the MIT Licence, please see LICENCE for further information.
FAQs
Unknown package
We found that mandy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.