Active Malware Campaign Targeting Popular Python Packages Underway

• birdcage

  13 173 7.3 Rust

  Cross-platform embeddable sandboxing

  

In addition to this, taking precautions to not install unknown packages is probably also extremely prudent. Towards that end, we've open sourced a cross platform embeddable sandbox for package installations. Source is freely available on Github (https://github.com/phylum-dev/birdcage) and we've added it into our tooling so you can run pip install ... and it'll limit access to disk, network, etc. during package installation.

• pypi-scan

  1 27 10.0 Python

  Discontinued Scan pypi for typosquatting

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• cli

  12 99 9.2 Rust

  Command line interface for the Phylum API (by phylum-dev)

  

Our CLI tool (also open source and free) will check for typosquats, dependency confusion, malicious code, vulnerabilities, etc. in your package dependencies. Works for pypi, npm, rubygems, maven, nuget and very recently golang and rust crates.

Suggest a related project