Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
@quintessential/health-hid
Advanced tools
A library for interacting with medical devices over WebHID.
A library for interacting with medical devices over WebHID.
This library is primarily focused around receiving readings from health-related biometric devices.
Due to WebHID security-related limitations, users need to explicitly grant the page permission to utilize their devices on every single page load.
As such, users of the library need to manually call ask for a device handle via Device.requestDevice()
.
Upon receiving access, the device will be automatically opened and ready for use.
Individual devices may then utilize said device handle to interact with the hardware device through the relevant device utils.
Besides returning the actual response, device commands typically log successful output in a text representation.
By default, said output is piped to the console, but a custom data handler may be specified via devHandle.setStrOut(dataHandler)
.
# Retrieving the active slot's current user ID from a Microlife Blood Pressure Monitor
const userId = await HealthHid.MicrolifeBPM.getUserId(device);
console.log(userId);
> KON14
git clone git@github.com:Quintessential-SFT/HealthHID.git
cd HealthHID
npm ci
npm run dev
# Navigate to http://localhost:8080
Blood Pressure Monitors:
Manufacturer | Device | Vendor ID | Product ID | Namespace |
---|---|---|---|---|
Microlife | * | 0x4B4 | 0x5500 | MicrolifeBPM |
(*) Most Microlife BPM devices utilize the implemented BPA-100 protocol.
Blood Glucose Monitors:
Manufacturer | Device | Vendor ID | Product ID | Namespace |
---|---|---|---|---|
Microlife | GlucoTeq | 0x04D9 | 0xB564 | MicrolifeGlucoTeq |
OkBiotech | OkMeter | 0x04D9 | 0xB564 | MicrolifeGlucoTeq |
WebHID is currently only supported on Chromium* desktop browsers.
FAQs
A library for interacting with medical devices over WebHID.
The npm package @quintessential/health-hid receives a total of 5 weekly downloads. As such, @quintessential/health-hid popularity was classified as not popular.
We found that @quintessential/health-hid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.