
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@ourea/video-player
Advanced tools
npm install @ourea/video-player
const svp = new ShineVP({
load: async (dataSet, opt) => {
return Promise.all(dataSet.map(async (data) => {
const { params } = data
const rst = await http('请求地址', params)
const {
url, // 播放地址 或者 唤起播放器应用链接
id, // 该参数作为唯一标示使用 也可以用 pnumber 字段, 注意不可重复
type, // 说明该url的执行方式,是否为 hls流播放 或者 唤起应用
} = rst
const heartBeat = { // 针对播放窗口的心跳
duration: number,
callback: Function | Promise,
}
return { url, id, type, heartBeat? }
}))
}
});
svp.open(dataSet)
// 异步时可以主动关闭 tip 提示的方法
svp.off()
load
方法中,返回的参数为load({ url, id | pnumber, msg, type }, type, comp)
open
方法接受一个Object
对象或者是Object[]
,数据的对象或者数组单元中需包含以下字段{ type, comp, id | pnumber }
确保正常使用需讲库下static目录下的的内容拷贝到本地项目中
FAQs
shine project video player
We found that @ourea/video-player demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.