
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@cza_li/node-librealsense
Advanced tools
This module works with Intel® RealSense™ D400 series camera (and SR300 camera). It's part of the Intel® librealsense open source project.
const rs2 = require('node-librealsense');
const colorizer = new rs2.Colorizer(); // This will make depth image pretty
const pipeline = new rs2.Pipeline(); // Main work pipeline of RealSense camera
pipeline.start(); // Start camera
const frameset = pipeline.waitForFrames(); // Get a set of frames
const depth = frameset.depthFrame; // Get depth data
const depthRGB = colorizer.colorize(depth); // Make depth image pretty
const color = frameset.colorFrame; // Get RGB image
// TODO: use frame buffer data
depthRGB.getData();
color.getData();
// Before exiting, do cleanup.
rs2.cleanup();
More examples can be found in examples directory of the module.
Install Python 2.7.xx, make sure "Add python.exe to Path" is checked during the installation.
Install Visual Studio 2015 or 2017. The Visual Studio 2017 Community version also works.
After installation, make sure msbuild.exe is in PATH, e.g "C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\MSBuild\15.0\Bin"
Install CMake, make sure CMake is in system PATH (Choose "Add CMake to the system PATH for all users" or "Add CMake to the system PATH for the current user" during the installation).
Note: The npm module windows-build-tools is not suffcient to build the native C++ librealsense.
sudo apt install -y libusb-1.0-0-dev pkg-config libgtk-3-dev libglfw3-dev cmake
Please refer to Linux installation doc or Windows installation doc for full document of C++ librealsense build environment setup.
Note: OSX support for the full range of functionality offered by the SDK is not yet complete.
Install XCode 6.0+ via the AppStore.
Install the Homebrew package manager via terminal - link
Install the following packages via brew:
brew install libusb pkg-configbrew install homebrew/versions/glfw3brew install cmakenpm install -g jsdoc
npm install --save node-librealsense
It will take a while to build C++ librealsense library, and then the Node.js addon will be built. If both of them succeed, the node-librealsense module is ready to use.
When it's installed, you can run examples to see if it works fine. Plug in your Intel® RealSense™ camera and do the following:
cd node-librealsense/examples
npm install
node nodejs-capture.js
nodejs-align.js: capture and then align RGB image frames to depth image frames, using depth info to remove background by a distance threshold.nodejs-capture.js: display RGB image frames and colorized depth image frames that are captured in real timenodejs-save-to-disk.js: capture a RGB image frame and a depth image frame, then save both of them to disk file (*.png)nodejs-pointcloud.js: capture RGB image frames and depth image frames, and then use them to generate and visualize textured 3D pointcloudOpen node-librealsense/doc/index.html for full reference document. If it isn't there, run the following commands to generate it:
cd node-librealsense/
npm run doc
List of supported platforms
node-gyp to support Visual Studio 2017 (if you're using it)FAQs
Node.js API for Intel® RealSense™ SDK 2.0 [2.51.1]
We found that @cza_li/node-librealsense demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.