
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
electron-audio-loopback
Advanced tools
Capture system audio loopback on macOS 12.3+, Windows 10+ and Linux
An Electron plugin for capturing system audio loopback on macOS 12.3+, Windows 10+ and Linux without any third-party loopback drivers or dependencies.
To play around with a full example, check out the mic-speaker-streamer repo. It's a simple app that allows you to simultaneously stream your microphone and system audio to a third-party transcription API while also recording both streams into a WAV file. Alternatively, check out the bundled example in this repo.
If your app is using Electron Audio Loopback, make a PR to add it to the list below! Both open and closed source apps are welcome.
npm install electron-audio-loopback
const { app } = require('electron');
const { initMain } = require('electron-audio-loopback');
// Initialize this plugin in your main process
// before the app is ready. Simple!
initMain();
app.whenReady().then(() => {
// Your app initialization...
});
If you do not have nodeIntegration enabled in your renderer process, then you'll need to manually initialize the plugin via IPC. See the example below:
// preload.js
const { contextBridge, ipcRenderer } = require('electron');
contextBridge.exposeInMainWorld('electronAPI', {
enableLoopbackAudio: () => ipcRenderer.invoke('enable-loopback-audio'),
disableLoopbackAudio: () => ipcRenderer.invoke('disable-loopback-audio')
});
// renderer.js
async function getLoopbackAudioMediaStream() {
// Tell the main process to enable system audio loopback.
// This will override the default `getDisplayMedia` behavior.
await window.electronAPI.enableLoopbackAudio();
// Get a MediaStream with system audio loopback.
// `getDisplayMedia` will fail if you don't request `video: true`.
const stream = await navigator.mediaDevices.getDisplayMedia({
video: true,
audio: true,
});
// Remove video tracks that we don't need.
// Note: You may find bugs if you don't remove video tracks.
const videoTracks = stream.getVideoTracks();
videoTracks.forEach(track => {
track.stop();
stream.removeTrack(track);
});
// Tell the main process to disable system audio loopback.
// This will restore full `getDisplayMedia` functionality.
// Do this if you need to use `getDisplayMedia` for other
// purposes elsewhere in your app.
await window.electronAPI.disableLoopbackAudio();
// Boom! You've got a MediaStream with system audio loopback.
// Use it with an audio element or Web Audio API.
return stream;
}
If nodeIntegration is enabled in your renderer process, then you can import the renderer helper function directly. This will take care of everything for you in one line of code.
const { getLoopbackAudioMediaStream } = require('electron-audio-loopback');
// Get a MediaStream with system audio loopback
const stream = await getLoopbackAudioMediaStream();
// The stream contains only audio tracks
const audioTracks = stream.getAudioTracks();
console.log('Audio tracks:', audioTracks);
// Use the stream with an audio element or Web Audio API
const audioElement = document.getElementById('audio');
audioElement.srcObject = stream;
audioElement.play();
If you don't want to remove the video tracks, you can pass removeVideo: false to the getLoopbackAudioMediaStream function.
initMain(options?: InitMainOptions): Initialize the plugin in the main process. Must be called before the app is ready.
sourcesOptions: The options to pass to the desktopCapturer.getSources method.forceCoreAudioTap: Whether to force the use of the Core Audio API on macOS (can be used to bypass bugs for certain macOS versions).loopbackWithMute: Whether to use the loopback audio with mute. Defaults to false.sessionOverride: The session to override. Defaults to session.defaultSession.onAfterGetSources: A function that is called after the sources are retrieved. Useful for advanced & unique scenarios. Defaults to undefined.getLoopbackAudioMediaStream(options?: GetLoopbackAudioMediaStreamOptions): Helper function that returns a Promise, resolves to a MediaStream containing system audio loopback. Video tracks are automatically removed from the stream.
removeVideo: Whether to remove the video tracks from the stream. Defaults to true.The plugin registers these IPC handlers automatically, ensure you don't override them!
enable-loopback-audio: Enables system audio loopback capturedisable-loopback-audio: Disables system audio loopback capture# Install dependencies
npm install
# Build the project
npm run build
# Development mode with watch
npm run dev
# Lint code
npm run lint
# Run example
npm test
PR's welcome!
src/
├── index.ts # Main entry point with conditional exports
├── main.ts # Main process initialization
├── config.ts # Configuration
├── types.d.ts # Type definitions
└── renderer.ts # Renderer process helper function
MIT © Alec Armbruster @alectrocute
FAQs
Capture system audio loopback on macOS 12.3+, Windows 10+ and Linux
The npm package electron-audio-loopback receives a total of 4,921 weekly downloads. As such, electron-audio-loopback popularity was classified as popular.
We found that electron-audio-loopback demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.