Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This is a provider for taskmapper. It provides interoperability with Mingle and it's issue tracking system through the taskmapper gem.
First we have to instantiate a new taskmapper instance, your Mingle installation should have api access enable:
mingle = TaskMapper.new(:mingle, {:server => 'myserver', :username=> 'foo', :password => 'bar'})
If you do not pass in the server name, username and password, you won't get any information.
Also you have to enable basic authentication, set the basic_authentication_enabled configuration option to true in the Mingle data directory/config/auth_config.yml file, where Mingle data directory is the path to the Mingle data directory:
basic_authentication_enabled: true
You can find your own projects by doing:
projects = mingle.projects # Will return all your projects
projects = mingle.projects(["project1", "project2"]) # You must use your projects identifier
project = mingle.project("your_project") # Also use project identifier in here
project = mingle.project!(:name => "New Project", :identifier => "new_project", :description => "This is a new project")
tickets = project.tickets # All tickets
ticket = project.ticket(<ticket_number>)
ticket = project.ticket!({:name => "New ticket", :description=> "Body for the very new ticket"})
comments = project.ticket.comments
comment = ticket.comment!(:content => 'New comment created.')
The taskmapper gem should automatically be installed during the installation of this gem if it is not already installed.
Since this and the taskmapper gem is still primarily a work-in-progress, minor changes may be incompatible with previous versions. Please be careful about using and updating this gem in production.
If you see or find any issues, feel free to open up an issue report.
Copyright (c) 2011 The Hybrid Group. See LICENSE for details.
FAQs
Unknown package
We found that taskmapper-mingle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.