
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@eyevinn/hls-cmcd
Advanced tools
Node library to decorate HLS with some CTA-5004 CMCD query params.
Example of use case is to use this library in a proxy that decorates an HLS with CMCD query parameters, in those cases where that is preferred (credit to Anders Näsman/Akamai for the idea).
Adds the following tags when information is available:
br
(Encoded Bitrate): based on bandwidth declaration in multivariant manifest. Added to the media playlist URL in the multivariant manifest.d
(Object Duration): based on segment duration declared in media playlist. Added to the segment URLs in a media playlist.nor
(Next Object Request): TBDot
(Object Type): Added as m
to the media playlist URL in the multivariant manifest.const { DecoratedHls } = require("@eyevinn/hls-cmcd");
const response = await fetch(url);
if (response.ok) {
const hls = new DecoratedHls(response.body);
const m3u = await hls.decorate();
console.log(m3u.toString());
}
Join our community on Slack where you can post any questions regarding any of our open source projects. Eyevinn's consulting business can also offer you:
Contact sales@eyevinn.se if you are interested.
Eyevinn Technology is an independent consultant firm specialized in video and streaming. Independent in a way that we are not commercially tied to any platform or technology vendor.
At Eyevinn, every software developer consultant has a dedicated budget reserved for open source development and contribution to the open source community. This give us room for innovation, team building and personal competence development. And also gives us as a company a way to contribute back to the open source community.
Want to know more about Eyevinn and how it is to work here. Contact us at work@eyevinn.se!
FAQs
Library to decorate HLS with CTA-5004 CMCD query params
We found that @eyevinn/hls-cmcd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.