Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@keiser/echip-webusb
Advanced tools
This library handles communication with the EChip USB reader using WebUSB.
Required Hardware: USB to 1-Wire/iButton Adapter (DS9490)
Required Drivers: 1-Wire/iButton Drivers for Windows
Install with NPM: npm install @keiser/echip-webusb
Import singleton instance from module using preferred module loading technique.
import EChipReaderWatcher from '@keiser/echip-webusb'
if (EChipReaderWatcher.isConnected) {
console.log('EChip Reader Connected 😄')
}
The EChipReaderWatcher
handles permissions and USB connection events. On first load, the browser will not have provided a grant to the site to access the USB device, so the EChipReaderWatcher.start()
method must be called by an event that originates from a user action. This may only be required once on the first visit to the site, or it may be required each time the site is loaded based on browser vendors preferred implementation.
connectButton.addEventListener('click', async () => {
try {
await EChipReaderWatcher.start()
} catch (error) {
console.error(error.message)
}
})
Once the EChipReaderWatcher.start()
method has been called the class will prompt the browser for permission and begin watching for devices matching the EChip Readers device signature. To be alerted when a device is found, pass a function to the EChipReaderWatcher.onConnect()
method.
EChipReaderWatcher.onConnect((echipReader) => {
console.log('EChip Reader Connected 😄')
})
The EChipReaderWatcher.onConnect()
will pass in an EChipReader
object which is the object bound to the physical device connected. This library is capable of handling multiple EChip Reader devices simultaneously, so the onConnect()
method has potential for returning multiple EChipReader
devices over the course of the application's life.
echipReader.onDisconnect(() => {
console.log('EChip Reader Disconnected 😞')
})
The EChipReader
object has a onDisconnect()
method which will alert when the EChip Reader has been disconnected for some reason. Once an EChipReader
object has been disconnected, it is disposed and cannot be used again. The next time the device is connected, a new EChipReader
object will be returned.
echipReader.onEChipDetect(async (echip) => {
console.log('EChip Connected: ' + echip.id)
console.log(await echip.getData())
})
The EChipReader
object also has an onEChipDetect()
method which will alert when a valid EChip has been placed into the reader. The event passes in an EChip
object that can be used to interact with the EChip data directly. Just like the EChipReaderWatcher.onConnect()
method, the EChipReader.onEChipDetect()
method can be called multiple times for multiple EChips all being handled concurrently. Once an EChip is disconnected, the EChip
object is disposed and cannot be reused.
Full example usage:
import EChipReaderWatcher from '@keiser/echip-webusb'
document.addEventListener('DOMContentLoaded', event => {
const connectButton = document.querySelector('#connect') as HTMLInputElement
if (connectButton) {
connectButton.addEventListener('click', async () => {
try {
await EChipReaderWatcher.start()
} catch (error) {
console.error(error.message)
}
})
}
EChipReaderWatcher.onConnect((echipReader) => {
console.log('EChip Reader Connected 😄')
echipReader.onEChipDetect(async (echip) => {
console.log('EChip Connected: ' + echip.id)
console.log(await echip.getData())
})
echipReader.onDisconnect(() => {
console.log('EChip Reader Disconnected 😞')
})
})
})
The EChipReaderWatcher
is a singleton class which handles the USB device monitoring and permissions handling. There can be only one EChipReaderWatcher
instance created within a window
scope, so the library instantiates the class during import and preserves a single instance for all imports.
Name | Usage |
---|---|
isConnected: boolean | Indicates whether an eChip Reader Device is connected |
Name | Usage |
---|---|
onConnect(Listener<EChipReader>): Disposable | Adds an event listener for when an eChip Reader Device is connected. Callback method will be passed the new EChipReader instance for the connected device. |
start(): Promise<void> | Initializes the watcher by first requesting permissions and then doing a hardware search. This method must be triggered by a user action such as a click event or the permission request will be denied. |
stop(): Promise<void> | Closes all active connections. |
The EChipReader
instance is passed into the onConnect
callback function and is the interface to the connected eChip Reader Device.
Name | Usage |
---|---|
claimed: Promise<boolean> | Promise indicating if the USB device interface has been claimed. |
disposed: boolean | Indicates if the device connection has been severed and the class instance disposed. |
Name | Usage |
---|---|
onDisconnect(Listener<null>): Disposable | Adds an event listener for when this eChip Reader Device becomes disconnected. The instance will be disposed following this event. |
onEChipDetect(Listener<EChip>): Disposable | Adds an event listener for when an eChip is connected to the eChip Reader device. Callback method will be passed the new EChip instance for the connected eChip. |
The EChip
instance is passed into the onEChipDetect
callback function and is the interface to the connected eChip device.
Name | Usage |
---|---|
id: string | UUID string of the eChip. |
disposed: boolean | Indicates if the eChip connection has been severed and the class instance disposed. |
Name | Usage |
---|---|
destroy(): void | Called to disconnect the eChip device. |
onDisconnect(Listener<null>): Disposable | Adds an event listener for when this eChip becomes disconnected. The instance will be disposed following this event. |
getData(): Promise<EChipObject> | Promise resolves with an EChipObject representing the data on the eChip. |
clearData(): Promise<EChipObject> | Method clears the data on the eChip and resolves with an EChipObject of the new blank eChip data. |
setData({string: MachineObject}): Promise<EChipObject> | Method sets the data on the eChip according to the data passed into the method. The method accepts an object with string keys corresponding to the machine's 4-digit model number with the MachineObject as the value of the property. |
interface EChipObject {
machineData: {[index: string]: MachineObject}
rawData: Uint8Array[]
validStructure: boolean
}
interface MachineObject {
position: MachinePosition
sets: MachineSet[]
}
interface MachinePosition {
chest: number | null
rom2: number | null
rom1: number | null
seat: number | null
}
interface MachineSet {
version: string
serial: string
time: string
resistance: number
precision: Precision
units: ForceUnit
repetitions: number
peak: number | null
work: number | null
distance: number | null
chest: number | null
rom2: number | null
rom1: number | null
seat: number | null
test: MachineTest | null
}
interface MachineTest {
type: TestType
high: MachineTestResult | null
low: MachineTestResult | null
}
interface MachineTestResult {
power: number
velocity: number
force: number
position: number
}
enum Precision {
dec = 'dec',
int = 'int'
}
enum ForceUnit {
lb = 'lb',
kg = 'kg',
ne = 'ne',
er = 'er'
}
enum TestType {
power6r = 'power6r',
a4206r = 'a4206r',
a42010r = 'a42010r'
}
Maxim Integrated 1-Wire USB Android notes
Maxim Integrated 1-Wire USB Android project
Copyright Keiser Corporation under the MIT license.
FAQs
Keiser Air eChip WebUSB Library
The npm package @keiser/echip-webusb receives a total of 2 weekly downloads. As such, @keiser/echip-webusb popularity was classified as not popular.
We found that @keiser/echip-webusb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.