Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@jxstjh/jhvideo
Advanced tools
import { type } from "os";
export type DeviceType = 'pvg67' | 'pvgplus' | 'rtsp' | 'gb28181';
export type ProtocolType = 'httpflv' | 'websocketflv' | 'hls' | 'webrtc';
export type Streamtype = 'vod' | 'live';
export enum BarItemType {
BTN = 'btn',
LABEL = 'label'
}
export interface ToolBarItem {
type: BarItemType;
label?: string;
icon?: string;
className?: string;
cmd?: string;
cb?: Function;
tip?: string;
}
export interface StreamOpt {
user: string; // Pvg/gb登录用户名
password: string; // pvg/gb登录密码
ip: string; // pvg/gb的 ip
port: string; // pvg / gb端口
channel: string; // pvg/gb通道号, pvm中的id。pvgplus可在末尾用#传入媒体参数, 包括video、audio、profile, 具体取值: video:H264 H265 MPEG4;audio:AAC G711 G726 G729;profile:CIF D1 HD 0 1 2 三种媒体参数任意组合,无先后顺序,例如 #D1、#H264#HD#G711、#G711#HD#H264, profile中的0、1、2、...代表主子码流
title?: string; // 通道名称
url?: string; // Rtsp的地址
sipServerId?: string; // 国标网关id
streamtype?: Streamtype;
deviceType?: DeviceType;
protocolType?: ProtocolType;
isptz?: boolean; // 是否云台控制
beginTime?: string; // 录像开始时间
endTime?: string; // 录像结束时间
vod?: number; // 录像存储类型: 0:服务录像 1~255:设备录像,
headerToolBar?: Array<ToolBarItem>, // header toolbae
footerToolBar?: Array<ToolBarItem>, // footer toolbae
hideHeaderToolBar?: boolean; // 是否隐藏对应工具栏
hideFooterToolBar?: boolean; // 是否隐藏对应工具栏
enableWorker?: boolean; // 是否启用web worker
}
export const defaultStreamOpt = {
user: 'admin',
deviceType: "pvgplus",
isptz: false,
password: "a123456",
protocolType: "websocketflv",
streamtype: "live",
footerToolBar: [],
headerToolBar: [],
enableWorker: false
};
export const createDefaultStreamOpt = () => {
return Object.assign({}, defaultStreamOpt);
}
export type StreamSpeed = -4 | -3 | -2 | -1 | 0 | 1 | 2 | 3 | 4;
export interface PTZParam {
streamId?: string; // 流id
cmd: number;
value: number;
}
export enum JPEvent {
DESTROY = 'destroy',
INITED = 'inited',
CREATED = 'created',
SEEKED = 'seeked',
PLAY = 'play',
PAUSE = 'pause',
}
Copyright (C) 2021 magicxqq. All Rights Reserved.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
FAQs
HTML5 jhvideo base on MPEG2-TS Stream Player
The npm package @jxstjh/jhvideo receives a total of 462 weekly downloads. As such, @jxstjh/jhvideo popularity was classified as not popular.
We found that @jxstjh/jhvideo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.