
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github.com/chirag-and-dheeraj/video-streaming-server
We launched Dekho on Peerlist in the 3rd Week of January 2025 and we had a pretty good response.
Dekho is a research and study project aimed at understanding and learning about audio and video streaming. Our primary focus was on implementing the HLS (HTTP Live Streaming) protocol to build an on-demand video streaming server.
APPWRITE_KEY
, APPWRITE_PROJECT_ID
and the BUCKET_ID
.docker-compose
on your machine..env
file using .env.docker as a reference.docker-compose up
to start the server.make
utility because we have created a Makefile to ease the setupgo version go1.23
, ffmpeg
utility and psql (PostgreSQL) 16.3
database.make install-dev
.
make install-dev
takes care of installing PostgreSQL, Go, FFMpeg, golang-migrate and Go dependencies.make start-postgres
to start the postgres service.sudo -u postgres createuser -s username_here -P
-P
will prompt for a password.psql
shell by running this command sudo -u postgres psql
and create a database by running CREATE DATABASE <database_name>;
..env
file using .env.local as a reference.make cleanstart
.http://127.0.0.1:8000
make start
make clean
Our journey has been greatly enriched by the insights and guidance from various resources. A pivotal article that set us on the right path is "Learning the basics of video streaming with Golang" by Rohit Mundra.
For a comprehensive list of resources that have been instrumental in our learning and development process, please refer to our documentation.
We welcome any queries or contributions to the project. If you have any questions or suggestions, please feel free to reach out to us:
Stay tuned for upcoming blog posts and updates on our progress. If you haven't heard from us in a while, feel free to bug us about it!
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.