
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@distube/youtube-dl
Advanced tools
A simple Node.js wrapper for youtube-dl. Customized for DisTube.js.org
youtube-dl version available.$ npm install @distube/youtube-dl --save
const youtubedl = require('@distube/youtube-dl')
youtubedl('https://example.com', {
dumpSingleJson: true,
noWarnings: true,
noCallHome: true,
noCheckCertificate: true,
preferFreeFormats: true,
youtubeSkipDashManifest: true,
referer: 'https://example.com'
})
.then(output => console.log(output))
It's equivalent to:
$ youtube-dl https://example.com --dump-json --no-warnings --no-call-home --no-check-certificate --prefer-free-formats --youtube-skip-dash-manifest --referer=https://example.com
Required
Type: string
The URL to target.
Type: object
Any flag supported by youtube-dl.
Any option provided here will passed to execa#options.
It's the same than the main method but it will return the raw subprocess object:
const youtubedl = require('youtube-dl-exec')
const fs = require('fs')
const subprocess = youtubedl.raw('https://example.com', { dumpSingleJson: true })
console.log(`Running subprocess as ${subprocess.pid}`)
subprocess.stdout.pipe(fs.createWriteStream('stdout.txt'))
subprocess.stderr.pipe(fs.createWriteStream('stderr.txt'))
setTimeout(subprocess.cancel, 30000)
The environment variables are taken into account when you perform a npm install in a project that contains youtube-dl-exec dependency.
They setup the download configuration for getting the youtube-dl binary file.
These variables can be
It determines the remote URL for getting the youtube-dl binary file.
The default URL is ytdl-org/youtube-dl latest release.
It determines the folder where to put the binary file.
The default folder is bin.
It determines the binary filename.
The default binary file could be youtube-dl or youtube-dl.exe, depending of the YOUTUBE_DL_PLATFORM value.
It determines the architecture of the machine that will use the youtube-dl binary.
The default value will computed from process.platform, being 'unix' or 'win32'.
youtube-dl-exec © microlink.io, released under the MIT License.
Authored and maintained by Kiko Beats with help from contributors.
microlink.io · GitHub microlink.io · Twitter @microlinkhq
FAQs
A simple Node.js wrapper for youtube-dl. Made for DisTube.js.org
We found that @distube/youtube-dl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.