Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@nodert-win10-21h1/windows.media.protection
Advanced tools
Use the Windows.Media.Protection UWP API directly from Node.js
The series of @nodert-win10-21h1
packages is unofficially-published NodeRT modules for Windows 10 SDK, version 21H1 (10.0.20348.0) corresponding to Windows 10v21H1 (May 2021 Update).
These are generated by the modified version of NodeRT thus are experimental, as the original doesn't have support for 21H1 SDK, nor for building with VS2022. Supporting for VS2022 is based on Taosenai's workaround with lxbndr's suggestion. The modified source code can be found here.
Below is the original description about this module.
A Node.js wrapper for the Windows.Media.Protection WinRT namespace, compatible with Windows 10 APIs.
Using this module, you'll be able to consume the Windows.Media.Protection API directly from Node.js.
This module was automatically generated by NodeRT. For more information on NodeRT and examples on how to use NodeRT modules, please visit the project page at: https://github.com/NodeRT/NodeRT.
The API exposed by this module is (almost) the same as the API that is listed in: http://msdn.microsoft.com/en-us/library/windows/apps/Windows.Media.Protection.aspx
The only difference in the API is in the way that asynchronous methods and events are used. (See https://github.com/NodeRT/NodeRT#ConsumingNodeRT for more details)
This module also contains TypeScript definition files for the API exposed by the module, as well as JavaScript intellisense support for Node.js tools for Visual Studio.
npm install -g npm
In order to install latest node-gyp run:
npm install -g node-gyp
In order to install this module, run npm install:
npm install @nodert-win10-21h1/windows.media.protection
If you wish to rebuild this module using node-gyp, make sure to use the appropriate VS version using --msvs_version=2012/2013/2015/2017/2022 flag:
For example:
cd [module folder path]
node-gyp rebuild --msvs_version=2022
If you fail to rebuild due to unable to find module 'nan', try running npm install --ignore-scripts
FAQs
Use the Windows.Media.Protection UWP API directly from Node.js
The npm package @nodert-win10-21h1/windows.media.protection receives a total of 6 weekly downloads. As such, @nodert-win10-21h1/windows.media.protection popularity was classified as not popular.
We found that @nodert-win10-21h1/windows.media.protection demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.