
Research
/Security News
Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.
broadcastnodejs
Advanced tools
server端主动发送广播给客户端
client分为:user和group两种。
user是指一个user在只允许一个链接注册(一个链接对应js意味着一个io.connection)。
group是指一个group可以允许多个链接注册。
调用register事件进行注册,
注册完成之后,假如有第三方或者服务内部需要发送给你信息,那么会根据你注册的user和group进行数据发送,你们之间只需约定好事件名称即可。
假如需要注销,不再收到消息,则可以调用unRegister事件进行注销。
broadcastInfo用于第三方发送给对应user或者group数据,相应事件eventName和内容text(内容可以是文本或者json)。
请求目录下有对应JS包,目前采用socket.io 2.1.0
代码例子
客户端可以发送三个公共事件:register,unRegister,broadcastInfo。
register
例子:{"user": "6A2C1FBC70FE38EEE050007F010061E5"}
例子:{"group": "vvv"}
unRegister
例子:{"user": "6A2C1FBC70FE38EEE050007F010061E5"}
例子:{"group": "vvv"}
broadcastInfo
roomName 发送房间名
eventName 发送事件名称
text 发送内容
例子:{"roomName":"xxx","eventName":"countMsg","text":"99"} {"roomName":"xxx","eventName":"countMsg","text":{"data","sdfdsf"}}
之后补充!!!!
npm:This link
FAQs
server端主动发送广播给客户端
The npm package broadcastnodejs receives a total of 1 weekly downloads. As such, broadcastnodejs popularity was classified as not popular.
We found that broadcastnodejs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.

Research
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.