
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
github.com/reolinkcameraapi/noctiluca-go-server
A Reolink Camera Management server written in Go built off of the reolinkapigo. This is the backend to the NoctiLuca frontend.
Oleaintueri is sponsoring the development and maintenance of these projects within their organisation.
https://discord.gg/8z3fdAmZJP
docker build . -t noctiluca
// detatch with -d option
docker run -p 8000:8000 noctiluca serve
tba
git clone git@github.com:ReolinkCameraAPI/noctiluca-go-server.git
cd noctiluca-go-server
go run . serve
// Or build and run binary
go build -o bin/noctiluca
./noctiluca serve
See the example in examples
folder or go
here
When running the server without any configurations passed, the defaults will kick in for development testing. It is advised to read-up on the configurations to get it working for your use-case.
This system uses swagger to generate the documentation needed from the source code.
To generate new swagger documentation run
swagger generate spec -o swagger.yaml
Serve the html docs
swagger serve swagger.yaml
For a complete matrix of the API, see below table.
resource | GET | POST | PUT | DELETE |
---|---|---|---|---|
camera | X | X | X | X |
model | X | X | - | - |
user | X | X | X | X |
network > Proxy | X | X | X | - |
Any Reolink camera that has a web UI should work. The other's requiring special Reolink clients do not work and is not supported here.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.