
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@arcsine/screen-recorder
Advanced tools
@arcsine/screen-recorder is a cross-platform library for recording desktop screens. The application relies upon FFmpeg as the base for recording. The primary functionality of the library is to start and stop recordings for a specific process (or active window). Additionally, the recorder supports audio recording, but has some limitations on macOS.
OSX requires a custom build of FFmpeg to bypass choppy audio. More information on the custom build can be found here.
The library works on macOS, Windows and X11-based Desktops (Linux, BSD). Wayland support is missing.
$ npm install @arcsine/screen-recorder
const { Recorder } = require('@arcsine/screen-recorder');
(async () => {
const { finish, stop } = await Recorder.recordActiveWindow({
file: './test.mp4',
fps: 3,
duration: 5
});
await finish;
})();
The recording api is for initiating and handling screen recordings.
class Recorder {
static async recordActiveWindow(opts: RecordingOptions): Promise<RecordingResult>;
static async recordWindowForProcess(pid: number, opts: RecordingOptions): Promise<RecordingResult>;
static async recordWindow(opts: RecordingOptions): Promise<RecordingResult>;
}
interface RecordingOptions {
// The location you want to store your output to
file: string;
// The framerate for recording, defaults to ffmpeg's default if not specified
fps?: number;
// Record audio?
audio?: boolean;
// How long to record for, default is until stop is called
duration?: number;
ffmpeg: {
// Path to ffmpeg executable, if not specified, the library will attempt to find it on the path
binary?: string;
// Any specific transcoding flags
transcode?: any;
// Any specific ffmpeg flags
flags?: any;
}
}
interface RecordingResult {
// A promise that resolves when the recording finishes, the resolved options are returned and
// are usable as inputs into the GIFCreator
finish: Promise<RecordingOptions>;
// The raw child process of the ffmpeg operation
proc: ChildProcess;
// A function to programmatically stop the recording
// The now parameter indicates a hard stop or a soft stop
stop: (now?: boolean) => void;
}
The GIF generator handles files generated from screen recordings to produce animated gifs of the output
class GIFCreator {
static async generate(opts: GIFOptions): Promise<GIFResult>;
}
interface GIFOptions {
// The file you want to convert to an animated gif
file: string;
// Output file defaults to the file name with a .gif extension
output?: string;
// The framerate for recording, defaults to ffmpeg's default if not specified
fps?: number;
// The scale factor on the final gif
scale?: number;
ffmpeg?: {
// Path to ffmpeg executable, if not specified, the library will attempt to find it on the path
binary?: string;
};
}
interface GIFResult {
// A promise that resolves when the recording finishes, the final filename is returned
finish: Promise<string>;
// A function to programmatically stop the conversion
// The now parameter indicates a hard stop or a soft stop
stop: (now?: boolean) => void;
}
Additionally, the library supports the ability to dynamically download an ffmpeg binary. This is meant to be used by library consumers to allow for prompting of downloads if the binary is not found.
class DownloadUtil {
/**
* Will download a component to the specified destination
*/
static async downloadComponent(opts: {
// ffmpeg | ffplay | ffprobe
component?: Component,
// Where the executable should be stored
destination: string,
// The version you want installed, defaults to latest
version?: string,
// The os/arch you want to install, defaults to auto-detect
platform?: Platform,
// Listen on the download progress with percentage downloaded
progress?: (pct: number) => void
}):Promise<string>;
}
Recording an active window, and converting to an animated gif
import { Recorder, GIFCreator } from './src';
(async function () {
const { finish } = await Recorder.recordActiveWindow({
file: './test.mp4',
fps: 3,
duration: 5
});
const finalOpts = await finish;
const gifOpts = await GIFCreator.generate({
...finalOpts,
scale: .25,
output: 'funny.gif'
});
await gifOpts!.finish;
})();
MIT
FAQs
Leverages FFMpeg to perform screen recordings
We found that @arcsine/screen-recorder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.