
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@rtco/peer
Advanced tools
Artico peer library. Please refer to the documentation for more information.
npm install @rtco/peer
The following example show how to connect two peers and share audio/video or any data between them:
import Peer from "@rtco/peer";
const p1 = new Peer({ initiator: true });
const p2 = new Peer();
p1.on("signal", (data) => {
// signal p2 somehow
p2.signal(data);
});
p2.on("signal", (data) => {
// signal p1 somehow
p1.signal(data);
});
p1.on("connect", () => {
// data channel is connected and ready to be used
p1.send("Hey Peer 2, this is Peer 1!");
});
p2.on("data", (data) => {
console.log("Received a message from Peer 1:", data);
});
p2.on("stream", (stream, metadata) => {
// when adding streams to a connection, we can provide any object as metadata
console.log("Received new stream from Peer 1:", metadata);
});
// ...
navigator.mediaDevices
.getUserMedia({
video: true,
audio: true,
})
.then((stream) => {
// send stream to Peer 2 with metadata indicating type of stream
p1.addStream(stream, {
type: "camera",
});
})
.catch(console.error);
FAQs
artico peer library
The npm package @rtco/peer receives a total of 14 weekly downloads. As such, @rtco/peer popularity was classified as not popular.
We found that @rtco/peer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.