
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
This gem allows a Ruby developer to work with a read-only view of project plans saved by a number of popular project planning applications. The work required to read data from these files is actually carried out by a Java library, hence you will need Java installed and available on your path in order to work with this gem. Once the project data has been read from a file, a set of Ruby objects provides access to the structure of the project plan and its attributes.
This gem only came about through the interest and support of Procore, who would love to hear from you if you're excited about working with Ruby and Rails.
Add this line to your application's Gemfile:
gem 'mpxj'
And then execute:
$ bundle
Or install it yourself as:
$ gem install mpxj
You'll find details of what has changed in this version here.
Full details of the supported file formats can be found here.
The following is a trivial example showing some basic task and resource details being queried from a project:
project = MPXJ::Reader.read("project1.mpp")
puts "There are #{project.all_tasks.size} tasks in this project"
puts "There are #{project.all_resources.size} resources in this project"
puts "The resources are:"
project.all_resources.each do |resource|
puts resource.name
end
puts "The tasks are:"
project.all_tasks.each do |task|
puts "#{task.name}: starts on #{task.start}, finishes on #{task.finish}, it's duration is #{task.duration}"
end
The gem represents the project plan using the following classes, all of which reside in the MPXJ module.
A Project contains Resources and Tasks. Each Resource can be Assigned to one or more Tasks. Tasks can have dependencies between them which are represented as Relations.
Acknowledgements for this library can be found here.
FAQs
Unknown package
We found that mpxj demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.