
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
drachtio-client
Advanced tools
dracht.io is an application framework that is designed to let node.js developers easily integrate Voice-over-IP (VoIP) features into their applications using familiar middleware patterns.
The dracht.io architecture consists of the following components:
drachtio-client is a low-level framework that is intended to be used in conjunction with drachtio-connect middleware. This document describes the drachtio-client feature set and API, but the reader is encouraged to review the drachtio-connect library as well. Generally speaking, a developer will interact with the dracht.io framework through the higher-level drachtio-connect middleware framework rather than directly through drachtio-client, although it is important to know how to create a client and to be familiar with the basic API and objects provided by this library.
dracht.io lets you build all sorts of SIP applications: SIP proxies, user agent clients and servers, back-to-back user agents, registrars, and more.
Here is an example showing how to create a simple SIP proxy server:
//require the drachtio client-side agent, and create an instance of it
var Agent = require('drachtio-client').Agent ;
var agent = new Agent(handler) ;
//connect to a drachtio server
agent.connect({
host: 'localhost',
port: 9022,
secret: 'cymru'
}) ;
//tell agent which messages we want to receive
agent.route('invite') ;
agent.route('bye') ;
//now handle incoming messages
function handler(req,res) {
if( req.msg.method === 'INVITE') {
req.proxy({
type: 'stateful',
destination: 'sip:1234@mydomain.com',
headers: {
'User-Agent': 'drachtio rockx!'
}
}, function(err, results){
if( err ) return console.error( 'Error attempting to proxy: ', err ) ;
console.log('results: ', JSON.stringify( results ) ) ;
}) ;
}
}
FAQs
low-level message exchange module for dracht.io
We found that drachtio-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.