Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@imaegoo/live2d-api
Advanced tools
Live2D 看板娘插件 (https://www.fghrsh.net/post/123.html) 上使用的后端 API
│ model_list.json // 模型列表
│
├─model // 模型路径
│ └─GroupName // 模组分组
│ └─ModelName // 模型名称
│
├─add // 更新皮肤列表
├─get // 获取模型配置
├─rand // 随机切换模型
├─rand_textures // 随机切换皮肤
├─switch // 顺序切换模型
├─switch_textures // 顺序切换皮肤
└─tools
modelList.php // 列出模型列表
modelTextures.php // 列出皮肤列表
name-to-lower.php // 文件名格式化
textures
文件夹,自动识别│ index.json
│ model.moc
│ textures.cache // 皮肤列表缓存,自动生成
│
├─motions
│ idle_01.mtn
│ idle_02.mtn
│ idle_03.mtn
│
└─textures
default-costume.png
school-costume.png
winter-costume.png
texture_XX
命名textures_order.json
列出组合│ index.json
│ model.moc
│ textures.cache
│ textures_order.json
│
├─motions
│ idle_01.mtn
│ idle_02.mtn
│ idle_03.mtn
│
├─texture_00
│ 00.png
│
├─texture_01
│ 00.png
│ 01.png
│ 02.png
│
├─texture_02
│ 00.png
│ 01.png
│ 02.png
│
└─texture_03
00.png
01.png
textures_order.json
[
["texture_00"],
["texture_01","texture_02"],
["texture_03"]
]
textures.cache
[
["texture_00/00.png","texture_01/00.png","texture_02/00.png","texture_03/00.png"],
["texture_00/00.png","texture_01/00.png","texture_02/00.png","texture_03/01.png"],
["texture_00/00.png","texture_01/01.png","texture_02/01.png","texture_03/00.png"],
["texture_00/00.png","texture_01/01.png","texture_02/01.png","texture_03/01.png"],
["texture_00/00.png","texture_01/02.png","texture_02/02.png","texture_03/00.png"],
["texture_00/00.png","texture_01/02.png","texture_02/02.png","texture_03/01.png"]
]
model_list.json
添加多个模型│
├─model
│ ├─Group1
│ │ ├─Model1
│ │ │ index.json
│ │ │
│ │ └─Model2
│ │ index.json
│ │
│ ├─Group2
│ │ └─Model1
│ │ index.json
│ │
│ └─GroupName
│ └─ModelName
│ │ index.json
│ │ model.moc
│ │
│ ├─motions
│ └─textures
│
model_list.json
{
"models": [
"GroupName/ModelName",
[
"Group1/Model1",
"Group1/Model2",
"Group2/Model1"
]
],
"messages": [
"Example 1",
"Example 2"
]
}
/add/
- 检测 新增皮肤 并更新 缓存列表/get/?id=1-23
获取 分组 1 的 第 23 号 皮肤/rand/?id=1
根据 上一分组 随机切换/switch/?id=1
根据 上一分组 顺序切换/rand_textures/?id=1-23
根据 上一皮肤 随机切换 同分组其他皮肤/switch_textures/?id=1-23
根据 上一皮肤 顺序切换 同分组其他皮肤(>▽<) 都看到这了,点个 Star 吧 ~
API 内所有模型 版权均属于原作者,仅供研究学习,不得用于商业用途
MIT © FGHRSH
FAQs
live2d-api
The npm package @imaegoo/live2d-api receives a total of 0 weekly downloads. As such, @imaegoo/live2d-api popularity was classified as not popular.
We found that @imaegoo/live2d-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.