
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@byteplus/veplayer
Advanced tools
BytePlus Web player SDK,can automatically adapt to PC and H5 scenes, support MP4, HLS, FLV, DASH and other formats of on-demand and live broadcast, combined with video cloud, it has functions such as playback quality log reporting, encrypted playback, etc.
Install SDK dependencies into the project through the package management tool.
npm install @byteplus/veplayer --save
Import VePlayer and style files in the project.
import VePlayer from '@byteplus/veplayer';
import '@byteplus/veplayer/index.min.css';
Add a player container on the page where the player needs to be displayed, for example, add the following code to index.html.
<div id="video"></div>
After getting the video URL, instantiate the player.
const player = new VePlayer({
id: 'video', // playback container
url: "https://demo.vod.com/xxx.mp4", // video URL
vodLogOpts: {
vtype: 'MP4', // Video format, the video of HLS protocol should be imported into HLS
tag: 'Normal', // Business tags, used to distinguish different scenarios in the business, to facilitate subsequent multi-dimensional analysis
line_app_id: 235399, // [Required] The value is int type, the SDK application id for accessing VOD, which can be obtained from VOD Console-VOD SDK-Application Management
line_user_id: 'XXX' // User id, String or int type, if not passed in, it will be a value randomly generated according to the user's browser
}
});
For a detailed description of VOD, refer toBytePlus - Video On Demand - Player SDK - Web
const playerSdk = new VePlayer({
id: 'video',
isLive: true,
url: '//livepull.example.com/appname/streamname.flv'
});
FAQs
BytePlus Web Player
The npm package @byteplus/veplayer receives a total of 307 weekly downloads. As such, @byteplus/veplayer popularity was classified as not popular.
We found that @byteplus/veplayer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.