Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ALSA aplay wrapper for Node.js
It provides basic audio capabilities.
Node-aplay works on:
afplay
by default)ALSA stands for Advanced Linux Sound Architecture. It is a suite of hardware drivers, libraries and utilities which provide audio and MIDI functionality for the Linux operating system.
aplay is a simple native ALSA wav player (to reproduce .mp3 see mpg321).
Get ready. Before we start the real work, please update the system.
sudo apt-get update
sudo apt-get upgrade
If you are running on Raspberry Pi, please update Raspbian
sudo rpi-update
Install ALSA for audio playback
sudo apt-get install alsa-base alsa-utils
If you are planning on using a USB audio on Raspberry Pi you will need to set your USB audio device as the default device.
Edit /etc/modprobe.d/alsa-base.conf and replaced the line:
options snd-usb-audio index=-2
With the following lines:
options snd-usb-audio index=0 nrpacks=1
options snd-bcm2835 index=-2
After a reboot of your Raspberry Pi
aplay -l
Should output the following:
**** List of PLAYBACK Hardware Devices ****
card 0: XXXX [XXXX], device 0: USB Audio [USB Audio]
Subdevices: 1/1
Subdevice #0: subdevice #0
Your device volume will be set to 0 by default. Use the ALSA mixer to adjust the volume using your arrow keys:
alsamixer
Get it through npm:
$ npm install aplay --save
and then:
var Sound = require('aplay');
// fire and forget:
new Sound().play('/path/to/the/file/filename.wav');
// with ability to pause/resume:
var music = new Sound();
music.play('/path/to/the/file/filename.wav');
setTimeout(function () {
music.pause(); // pause the music after five seconds
}, 5000);
setTimeout(function () {
music.resume(); // and resume it two seconds after pausing
}, 7000);
// you can also listen for various callbacks:
music.on('complete', function () {
console.log('Done with playback!');
});
The constructor accepts a config object where you can provide:
channel
: specify a channel.$ node node_modules/aplay my-song.wav
It's simple as that.
FAQs
aplay wrapper for Node.js
The npm package aplay receives a total of 25 weekly downloads. As such, aplay popularity was classified as not popular.
We found that aplay demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.