How Attackers Can Sneakily Slip Malware Packages Into Poetry.lock Files

• pip-audit

  22 920 8.8 Python

  Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

  

https://pypi.org/project/pip-audit/ details usage and the GitHub Action install.

• cli

  12 99 9.2 Rust

  Command line interface for the Phylum API (by phylum-dev)

  

cli - uses sandbox to block packages during installation, performs pre-install checks to determine (by hitting the API) if the package performs actions congruent with malware, e.g. phylum pip install requests will use pip wrapped by the sandbox to install requests after verifying that it doesn't have malware like behavior.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project