
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
github.com/grafov/streamsurfer
As I moved away from videostreaming development I not more interested in this project. So I leave code as is in unfinished state. I'll continue to maintain m3u8 library as it is used in some other projects.
Current state: code broken. Don't use!
Stream Surfer — probe utiliy for HTTP video streaming. The utility detects errors in HTTP Streams (Apple HLS now supported) and monitor health of any HTTP resources. It may be used as regular monitoring tool and stress testing for mediaservers (and any HTTP-servers too).
Features are:
Planned features:
mediainfo
utility (from ffmpeg)This software can't be used for HLS playback.
streamsurfer
is an furfer development of Python hlsprobe
(https://github.com/grafov/hlsprobe).
You need Go language (http://golang.org) environment installed. Then:
go get github.com/grafov/bcast
go get github.com/grafov/m3u8
go get github.com/gorilla/mux
git clone https://github.com/grafov/streamsurfer
cd streamsurfer
sudo make install
The code includes Bootstrap 2 (http://getbootstrap.com) library (under Apache License).
It may be packaged with streamsurfer
due GPLv3 license.
To simplify installation Bootstrap code yet included in streamsurfer
package.
Later it will be splitted and Bootstrap will be downloaded separately.
Setup configuration file (copy one of templates from package) and start utility:
streamsurfer --config=config.yml
All stream problems logged to error log (error-log
parameter in the config params
section).
Web reports available at localhost:8088
(define listener with http-api-listen
).
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.