
Research
/Security News
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.
@teslemetry/node-red-contrib-teslemetry
Advanced tools
Node-RED nodes for controlling Tesla vehicles and energy sites via Teslemetry API
Node-RED nodes for controlling Tesla vehicles and energy sites via the Teslemetry API.
Navigate to your Node-RED user directory (usually ~/.node-red) and install:
cd ~/.node-red
npm install @teslemetry/node-red-contrib-teslemetry
Then restart Node-RED.
@teslemetry/node-red-contrib-teslemetrycd ~/.node-red
npm install /path/to/packages/node-red-contrib-teslemetry
Configuration node to store your Teslemetry Access Token.
Send commands to a specific vehicle or retrieve vehicle data.
Configuration:
msg.vin.msg.command.Inputs:
msg.vin (string): VIN of the vehicle (if not configured).msg.command (string): Command to execute (if not configured).msg.driver_temp (number): Driver temperature for setTemps.msg.passenger_temp (number): Passenger temperature for setTemps.msg.seat (string): Seat position for setSeatHeater (e.g., front_left).msg.level (number): Heat level (0-3) for setSeatHeater.msg.percent (number): Charge limit percentage for setChargeLimit.msg.amps (number): Charging amps for setChargingAmps.msg.lat (number): Latitude for triggerHomelink.msg.lon (number): Longitude for triggerHomelink.msg.value (string): Address or text for navigationRequest.Send commands to a Tesla Energy Site or retrieve site status.
Configuration:
msg.siteId.msg.command.Inputs:
msg.siteId (number): Energy Site ID (if not configured).msg.command (string): Command to execute (if not configured).msg.percentage (number): Backup reserve percentage for setBackupReserve.msg.percent (number): Off-grid reserve percentage for setOffGridVehicleChargingReserve.Listen for real-time Server-Sent Events (SSE) from Teslemetry.
Configuration:
Event Types:
Outputs:
msg.payload: The event data objectmsg.topic: The event typeListen for specific signal changes from a vehicle.
Configuration:
speed, odometer, battery_level)Outputs:
msg.payload: The new value of the signalmsg.topic: signalmsg.field: The name of the fieldmsg.command = "lockDoors"msg.driver_temp and msg.passenger_tempbattery_levelApache-2.0 License - see LICENSE file for details
Contributions are welcome! Please see the main repository for contribution guidelines.
FAQs
Node-RED nodes for controlling Tesla vehicles and energy sites via Teslemetry API
The npm package @teslemetry/node-red-contrib-teslemetry receives a total of 172 weekly downloads. As such, @teslemetry/node-red-contrib-teslemetry popularity was classified as not popular.
We found that @teslemetry/node-red-contrib-teslemetry demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.

Security News
Socket releases free Certified Patches for high-severity Nuxt vulnerabilities, including server-side remote code execution through server island props.

Security News
An open letter signed by 50 companies, from NVIDIA and Microsoft to Mistral and Hugging Face, urges Washington not to restrict open weight AI.