Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
This tool can be used on platforms such as HTML5 players or Node.js
Support push streaming-data to demux
Tree-shakable (The version coded with full code does not need to worry about the reference size. When the business only refers to a certain format of decoding, the overall code supports tree-shaking)
Any-combination packaging (These formats can be packaged according to requirements, users do not need to package all the code)
install
npm i demuxer
Setup
import { TSDemux, FLVDemux, MP4Demux, Events } from 'demuxer';
const demux = new TSDemux();
// const demux = new FLVDemux();
// const demux = new MP4Demux();
// The data is spit out in a streaming manner,
// and the first data is emitted as soon as possible.
demux.on(Events.DEMUX_DATA, (e) => {
console.log(e);
// if (e.stream_type === 15) {
// console.log(e)
// }
});
demux.on(Events.DONE, (e) => {
// consumed & flushed all piped buffer.
});
// buffer -> video bytes ArrayBuffer
demux.push(buffer, {
// Support push part of the data for parsing
// When done is set to true, if the data is decoded and there is no remaining data, the data is considered to have been pushed and Events.DONE will be emitted.
// When done is set to false, Events.DONE will not be emit, waiting for subsequent data push
done: true
});
Debug
var demuxer = new TSDemux({
debug: true
});
Demuxer Options
let options = {
// Setting options.debug = true; will turn on debug logs on JS console.
debug: true
};
var demuxer = new TSDemux(options);
// var demuxer = new MP4Demux(options);
// var demuxer = new FLVDemux(options);
Developer should parse the data of the mp4 header, and then locate the pos of the data information in the mdat according to the information described in the mp4 header.
Because the third party is likely to be internally built by the worker tool, in order not to conflict and redundancy with the worker tool, the worker is implemented by the user.
FAQs
A utility for transmux ts/mp4/flv
The npm package demuxer receives a total of 47 weekly downloads. As such, demuxer popularity was classified as not popular.
We found that demuxer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.