Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Networked audio player services.
A player process plays audio from URLs through the host's speakers. It maintains a queue of playable URLs and notifies connected clients whenever its state changes.
To start a player, run:
$ decibel-player
For available flags and options, run:
$ decibel-player -h
Usage: decibel-player [options]
Options:
-h, --help output usage information
-V, --version output the version number
-p, --port <port> the port on which to listen (defaut 3000)
-d, --debug log debugging messages
The player process is controllable via a WebSocket connection:
var socket = new WebSocket('http://localhost:3000');
// RPC call (calls `play(0, 0)` on the server)
socket.send(JSON.stringify({ name: 'play', args: [0, 0] }));
// Listen for state changes from the server
socket.onmessage = function (msg) {
var data = JSON.parse(msg.data);
console.log(data.name, data.args);
};
append([items])
- append the given items to the player queue (each item must have a URL property)replace([items])
- replace the player queue with the given itemsnext()
- advance to beginning of next itemprev()
- advance to beginning of previous item (or current item if no previous item exists)pause()
- stop the playback but preserve the current item index and postiionplay(index, position)
- play the item at the given index at the specified position (current index and position values will be used if left undefined)stop()
- stop the playback and reset the current item index and positionqueue:reset
- the player queue was reset with the items passed in the first argqueue:add
- the item passed in the first arg was appended to the player queuestate
- the player state changed to the values in the first arg (object includes index, status and position properties)Decibel uses multicast DNS-SD (i.e. Zeroconf/Bonjour) to discover services on the network. Decibel services all use the service type _decibel._tcp
and include a name
attribute in the TXT record corresponding to the specific type service (i.e. decibel-player
).
TODO
TODO
FAQs
Networked audio player services.
The npm package decibel receives a total of 1 weekly downloads. As such, decibel popularity was classified as not popular.
We found that decibel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.