
Research
/Security News
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
broadcastnodejs
Advanced tools
server端主动发送广播给客户端
client分为:user和group两种。
user是指一个user在只允许一个链接注册(一个链接对应js意味着一个io.connection)。
group是指一个group可以允许多个链接注册。
调用register事件进行注册,
注册完成之后,假如有第三方或者服务内部需要发送给你信息,那么会根据你注册的user和group进行数据发送,你们之间只需约定好事件名称即可。
假如需要注销,不再收到消息,则可以调用unRegister事件进行注销。
broadcastInfo用于第三方发送给对应user或者group数据,相应事件eventName和内容text(内容可以是文本或者json)。
注:假如发送目标group包含发送人自己,发送人是不会收到消息的。
请求目录下有对应JS包,目前采用socket.io 2.1.0
代码例子
客户端可以发送三个公共事件:register,unRegister,broadcastInfo。
register
例子:{"user": "6A2C1FBC70FE38EEE050007F010061E5"}
例子:{"group": "vvv"}
unRegister
例子:{"user": "6A2C1FBC70FE38EEE050007F010061E5"}
例子:{"group": "vvv"}
broadcastInfo
roomName 发送房间名
eventName 发送事件名称
text 发送内容
例子:{"roomName":"xxx","eventName":"countMsg","text":"99"} {"roomName":"xxx","eventName":"countMsg","text":{"data","sdfdsf"}}
之后补充!!!!
npm:This link
docket:This linke
FAQs
server端主动发送广播给客户端
The npm package broadcastnodejs receives a total of 1 weekly downloads. As such, broadcastnodejs popularity was classified as not popular.
We found that broadcastnodejs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.

Company News
As AI accelerates how code is written and shipped, Socket is scaling to protect the software supply chain from the growing wave of attacks targeting open source dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.