
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@matrix-io/matrix-lite-nfc
Advanced tools
MATRIX Lite NFC JS is an npm package that allows users of varying skill levels to easily program NFC with their MATRIX Creator.
This roadmap is for achieving a basic implementation of the checklist below.
Install matrix-hal-nfc to use this library.
Download the repository.
git clone https://github.com/matrix-io/matrix-lite-nfc-js
Install all dependencies.
npm install
You can now import the module into any .js
file.
const nfc = require("@matrix-io/matrix-lite-nfc");
Compiles any new C++ changes.
npm run build
View the examples folder!
When a read or write function completes, it will return a status code to indicate the result. nfc.Status
returns a string of what that number means.
nfc.status(/*number*/);
There can only be one instance of NFC reading. This is a hardware limitation that will not change.
// Configure what you want to read
let options = {
rate: 100 // Read loop speed (Milliseconds)
// At least 1 read options is required. Less options -> faster reading!
info: true, // Generic information for any NFC tag
pages: true, // All page data
page: 0, // A single page(faster than pages)
ndef: true // All NDEF data
}
// Start the loop
nfc.read.start(options, (code, tag) => {
// code: NFC activation status
// tag : Object with requested NFC data
});
nfc.read.stop();
An NFC constructor that represents an NDEF message. There are 2 uses for this class.
// Create an empty NDEF message
let msg = new nfc.message();
// Add NDEF Records to message
msg.addUriRecord("https://community.matrix.one");
msg.addUriRecord("tel:+14085551212");
msg.addTextRecord("Hello World");
msg.addTextRecord("Hola Mundo", "es");
msg.addMimeMediaRecord("text/json", '{"answer": 42}');
// You then pass msg into nfc.write.message(msg);
nfc.read.start({ndef:true}, (code, tag) => {
// You can create a new NDEF message from a scanned tag.
msg = new nfc.message(tag.ndef.content);
// Once created, you can read any known NDEF record.
console.log(msg.getRecords());
// or
console.log(msg.getRecord(0));
// You see the number of records with
// msg.getRecordCount();
});
Writing to an NFC tag should normally be done inside the read loop.
let msg = new nfc.message();
msg.addUriRecord("https://community.matrix.one");
nfc.write.message(msg).then((codes)=>{
// codes.activation : NFC activation status
// codes.write : NFC write status
});
nfc.write.erase().then((codes)=>{
// codes.activation : NFC activation status
// codes.write : NFC write status
});
Be careful when writing to a page. You can accidentally lock your NFC tag!
let page_index = 25; // page you want to overwrite
let page_byte = [48,45,59,21]; // Array of numbers that represents a byte
nfc.write.page(page_index, page_byte).then((code)=>{
// codes.activation : NFC activation status
// codes.write : NFC write status
});
FAQs
> Read and Write to NFC tags with a MATRIX Creator!
The npm package @matrix-io/matrix-lite-nfc receives a total of 1 weekly downloads. As such, @matrix-io/matrix-lite-nfc popularity was classified as not popular.
We found that @matrix-io/matrix-lite-nfc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.