
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
@livekit/agents-plugin-bey
Advanced tools
Support for Beyond Presence virtual avatars.
See https://docs.livekit.io/agents/integrations/avatar/bey/ for more information.
npm install @livekit/agents-plugin-bey
or
pnpm add @livekit/agents-plugin-bey
Create a developer API key from the creator dashboard and set the BEY_API_KEY environment variable with it:
export BEY_API_KEY=<your-bey-api-key>
import { AvatarSession } from '@livekit/agents-plugin-bey';
import { AgentSession } from '@livekit/agents';
// Create an avatar session
const avatarSession = new AvatarSession({
avatarId: 'your-avatar-id', // optional, defaults to stock avatar
apiKey: process.env.BEY_API_KEY, // optional if set via env var
});
// Start the avatar in your agent
await avatarSession.start(agentSession, room, {
livekitUrl: process.env.LIVEKIT_URL,
livekitApiKey: process.env.LIVEKIT_API_KEY,
livekitApiSecret: process.env.LIVEKIT_API_SECRET,
});
AvatarSessionCreates a new Beyond Presence avatar session.
avatarId?: string - The avatar ID to use. Defaults to stock avatar.apiUrl?: string - The Bey API URL. Defaults to https://api.bey.dev.apiKey?: string - Your Bey API key. Can also be set via BEY_API_KEY environment variable.avatarParticipantIdentity?: string - The identity for the avatar participant. Defaults to 'bey-avatar-agent'.avatarParticipantName?: string - The name for the avatar participant. Defaults to 'bey-avatar-agent'.connOptions?: APIConnectOptions - Connection options for retry logic.start(agentSession: AgentSession, room: Room, options?: StartOptions): Promise<void>Starts the avatar session and connects it to the room.
Options:
livekitUrl?: string - The LiveKit server URL. Can also be set via LIVEKIT_URL environment variable.livekitApiKey?: string - Your LiveKit API key. Can also be set via LIVEKIT_API_KEY environment variable.livekitApiSecret?: string - Your LiveKit API secret. Can also be set via LIVEKIT_API_SECRET environment variable.Apache 2.0
FAQs
Beyond Presence plugin for LiveKit Node Agents
The npm package @livekit/agents-plugin-bey receives a total of 3,179 weekly downloads. As such, @livekit/agents-plugin-bey popularity was classified as popular.
We found that @livekit/agents-plugin-bey demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 41 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.