Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@pplink/media-infra-client
Advanced tools
- https://github.com/pplink/mediasoup-client - It is a core package for communicating with [media-infra](https://github.com/pplink/media-infra) server using mediasoup. - It is forked from [versatica/mediasoup-client](https://github.com/versatica/mediasoup
media-infra-client
외부에서 직접적으로 사용하도록 유도된 대표 클래스mediasoup-client
의 Device
를 래핑
Device
: 하나의 MR에 대한 RTP 연결을 담당Device
만 생성함.유저가 고객사 서비스(페이지콜)에 접속
고객사 서버에서 MA에 접속 요청 → MA는 인증 후 토큰 발급. 발급된 토큰 정보는 Session 테이블에 3일동안 저장, 이후 만료됨
고객사 클라이언트에서 이 토큰을 넣어 MIC 사용
// 2. PCA Server
const { url, token } = await fetch("https://media.pplink.io/v1/api/connect");
return {
statusCode: 200,
body: { url, token }
};
// 3. PCA Client
const { url, token } = await fetch("https://pagecall.io/connect");
const mic = new MediaInfraClient(url, token);
MIC.produceTrack
을 호출해 트랙 송출을 시작MIC.listenTrack
MIC.listenTrack
함수에 콜백함수를 넣어 이후 생성되는 ConsumeManager
를 subscribe 할 수 있음.produceTrack
을 통해 생성된 ProduceManager
에서 startRecord
, stopRecord
를 통해 녹화 시작, 중단 가능.FAQs
- https://github.com/pplink/mediasoup-client - It is a core package for communicating with [media-infra](https://github.com/pplink/media-infra) server using mediasoup. - It is forked from [versatica/mediasoup-client](https://github.com/versatica/mediasoup
The npm package @pplink/media-infra-client receives a total of 8 weekly downloads. As such, @pplink/media-infra-client popularity was classified as not popular.
We found that @pplink/media-infra-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.