Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
bittorrent-lsd
Advanced tools
Local Service Discovery (LSD) provides a SSDP-like (http over udp-multicast) mechanism to announce the presence in specific swarms to local neighbors.
This module is used by WebTorrent.
npm install bittorrent-lsd
const opts = {
peerId: new Buffer('01234567890123456789'), // hex string or Buffer
infoHash: new Buffer('01234567890123456789'), // hex string or Buffer
port: common.randomPort() // torrent client port
}
const lsd = new LSD(opts)
// start getting peers from local network
lsd.start()
lsd.on('peer', (peerAddress, infoHash) => {
console.log('found a peer: ' + peerAddress)
})
lsd.destroy()
lsd = new LSD([opts])
Create a new lsd
instance.
lsd.start()
Start listening and sending (every 5 minutes) for local network announces.
lsd.destroy([callback])
Destroy the LSD. Closes the socket and cleans up resources.
lsd.on('peer', (peerAddress, infoHash) => { ... })
Emitted when a potential peer is found. peerAddress
is of the form host:port
. infoHash
is the torrent info hash.
lsd.on('warning', (err) => { ... })
Emitted when the LSD gets an unexpected message.
lsd.on('error', (err) => { ... })
Emitted when the LSD has a fatal error.
MIT. Copyright (c) Julen Garcia Leunda and WebTorrent, LLC.
FAQs
Local Service Discovery (BEP14) implementation
The npm package bittorrent-lsd receives a total of 4,786 weekly downloads. As such, bittorrent-lsd popularity was classified as popular.
We found that bittorrent-lsd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.