
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
[](https://www.npmjs.com/package/@2bad/tvt) [](https://opensource.org/license/MIT) [ CCTV systems.
npm install tvt
import { Device } from 'tvt'
try {
// Create and initialize a new device instance
const device = await Device.create('192.168.1.100', 9008)
// Login to the device
await device.login('admin', 'password')
// Get device information
const info = await device.getInfo()
console.log(`Connected to ${info.deviceName}`)
// Capture a snapshot
await device.saveSnapshot(0, '/path/to/snapshot.jpg')
// Clean up
await device.dispose()
} catch (error) {
console.error('Error:', error)
}
The main interface for interacting with TVT devices.
class Device {
static create(ip: string, port?: number, settings?: Settings): Promise<Device>
login(user: string, pass: string): Promise<boolean>
logout(): Promise<boolean>
getInfo(): Promise<DeviceInfo>
triggerAlarm(value: boolean): Promise<boolean>
saveSnapshot(channel: number, filePath: string): Promise<boolean>
dispose(): Promise<boolean>
// ... and more
}
See API Documentation for detailed method descriptions.
git clone https://github.com/yourusername/tvt.git
cd tvt
npm install
npm run build
npm test
tvt/
├── bin/ # Precompiled SDK libraries
├── docs/ # Documentation and examples
├── proto/ # Protocol definitions and dissectors
└── source/ # TypeScript implementation
├── lib/ # Core SDK implementation
├── helpers/ # Utility functions
└── types/ # TypeScript type definitions
await
:// Before
const info = device.info
// After
const info = await device.getInfo()
// Before
const device = new Device('192.168.1.100')
// After
const device = await Device.create('192.168.1.100')
// Before
device.info.deviceName
// After
const info = await device.getInfo()
info.deviceName
Contributions are welcome! Please feel free to submit a Pull Request. For major changes, please open an issue first to discuss what you would like to change.
This project is licensed under the MIT License - see the LICENSE file for details.
This project is not officially associated with TVT Digital Technology Co., Ltd. It is an independent implementation based on research and reverse engineering. Use at your own risk.
FAQs
[](https://www.npmjs.com/package/@2bad/tvt) [](https://opensource.org/license/MIT) [![GitHub Build Status](https://img.shields.io/github/actions/workfl
The npm package @2bad/tvt receives a total of 68 weekly downloads. As such, @2bad/tvt popularity was classified as not popular.
We found that @2bad/tvt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.