Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
[![NPM version](https://img.shields.io/npm/v/@2bad/tvt)](https://www.npmjs.com/package/@2bad/tvt) [![License](https://img.shields.io/npm/l/@2bad/tvt)](https://opensource.org/license/MIT) [![GitHub Build Status](https://img.shields.io/github/actions/workfl
A modern TypeScript SDK for TVT CCTV devices, providing a clean and type-safe interface for device management, monitoring, and control. This project is the result of extensive research and reverse engineering of TVT (Tongwei Video Technology) CCTV systems.
npm install tvt
import { Device } from 'tvt'
try {
// Create and initialize a new device instance
const device = await Device.create('192.168.1.100', 9008)
// Login to the device
await device.login('admin', 'password')
// Get device information
const info = await device.getInfo()
console.log(`Connected to ${info.deviceName}`)
// Capture a snapshot
await device.saveSnapshot(0, '/path/to/snapshot.jpg')
// Clean up
await device.dispose()
} catch (error) {
console.error('Error:', error)
}
The main interface for interacting with TVT devices.
class Device {
static create(ip: string, port?: number, settings?: Settings): Promise<Device>
login(user: string, pass: string): Promise<boolean>
logout(): Promise<boolean>
getInfo(): Promise<DeviceInfo>
triggerAlarm(value: boolean): Promise<boolean>
saveSnapshot(channel: number, filePath: string): Promise<boolean>
dispose(): Promise<boolean>
// ... and more
}
See API Documentation for detailed method descriptions.
git clone https://github.com/yourusername/tvt.git
cd tvt
npm install
npm run build
npm test
tvt/
├── bin/ # Precompiled SDK libraries
├── docs/ # Documentation and examples
├── proto/ # Protocol definitions and dissectors
└── source/ # TypeScript implementation
├── lib/ # Core SDK implementation
├── helpers/ # Utility functions
└── types/ # TypeScript type definitions
await
:// Before
const info = device.info
// After
const info = await device.getInfo()
// Before
const device = new Device('192.168.1.100')
// After
const device = await Device.create('192.168.1.100')
// Before
device.info.deviceName
// After
const info = await device.getInfo()
info.deviceName
Contributions are welcome! Please feel free to submit a Pull Request. For major changes, please open an issue first to discuss what you would like to change.
This project is licensed under the MIT License - see the LICENSE file for details.
This project is not officially associated with TVT Digital Technology Co., Ltd. It is an independent implementation based on research and reverse engineering. Use at your own risk.
FAQs
[![NPM version](https://img.shields.io/npm/v/@2bad/tvt)](https://www.npmjs.com/package/@2bad/tvt) [![License](https://img.shields.io/npm/l/@2bad/tvt)](https://opensource.org/license/MIT) [![GitHub Build Status](https://img.shields.io/github/actions/workfl
We found that @2bad/tvt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.