Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/moisesbr/keylogger
Capture global keyboard events on Linux
go get github.com/Moisesbr/keylogger
There is a helper on finding the keyboard.
keyboard := keylogger.FindKeyboardDevice()
Which goes through each file device name to find keyword "keyboard"
/sys/class/input/event[0-255]/device/name
and returns the file event path if found
/dev/input/event2
If the function returns empty string, you will need to cat each device name and get the event number. If you know already, you can easily pass it to constructor
keylogger.New("/dev/input/event2")
Once the keylogger returns channel event, you can switch by event code as described in input_event.go For start, you can listen on keyboard state change
keylogger.EvKey
Once you get desire event, there is a helper to parse code into human readable key.
event.KeyString()
NOTE
If you listen on keyboard state change, it will return double results. This is because pressing and releasing the key are 2 different state change. There is a helper function which you can call to see which type of state change happend
// returns true if key on keyboard is pressed
event.KeyPress()
// returns true if key on keyboard is released
event.KeyRelease()
You can find a example script in example/main.go
No magic, just run
go test -v
This library is under the MIT License
I don't drink beer, so energy drink will do :)
BTC: 19AtHE6dgKX3R9vJSCSKRyF1saexLcBRep
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.