Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Command Line Interface and library for Communications with Espruino JavaScript Microcontrollers
This repository contains a set of tools for the Espruino JavaScript Interpreter.
While it is used directly by the Espruino Web IDE, there's are also simple command-line and node.js
interfaces.
When installed as a Node module with npm install -g espruino
you get a command-line tool called espruino
:
USAGE: espruino ...options... [file_to_upload.js]
-h,--help : Show this message
-v,--verbose : Verbose
-q,--quiet : Quiet - apart from Espruino output
-m,--minify : Minify the code before sending it
-w,--watch : If uploading a JS file, continue to watch it for
changes and upload again if it does.
-p,--port /dev/ttyX : Specify port(s) to connect to
-b baudRate : Set the baud rate of the serial connection
No effect when using USB, default: 9600
--no-ble : Disable Bluetooth Low Energy (used by default if the 'bleat' module exists)
--list : List all available devices and exit
-t,--time : Set Espruino's time when uploading code
-o out.js : Write the actual JS code sent to Espruino to a file
-f firmware.bin : Update Espruino's firmware to the given file
Espruino must be in bootloader mode
Optionally skip N first bytes of the bin file,
-e command : Evaluate the given expression on Espruino
If no file to upload is specified but you use -e,
Espruino will not be reset
If no file, command, or firmware update is specified, this will act
as a terminal for communicating directly with Espruino. Press Ctrl-C
twice to exit.
For instance:
# Connect to Espruno and act as a terminal app (IF Espruino is the only serial port reported)
espruino
# Connect to Espruino on the specified port, act as a terminal
espruino -p /dev/ttyACM0
# Write a program to Espruino (IF Espruino is the only serial port reported)
espruino myprogram.js
# Otherwise you'll want to specify the exact port first
espruino -p /dev/ttyACM0 myprogram.js
# Write a program to Espruino and drop into a terminal, but then monitor
# myprogram.js for changes and upload it again
espruino --watch myprogram.js
# Load a file into two Espruino boards
espruino -p /dev/ttyACM1 /dev/ttyACM2 mycode.js
# Load a file into Espruino and save
espruino -p /dev/ttyACM0 mycode.js -e "save()"
# Execute a single command on the default serial device
espruino -e "digitalWrite(LED1,1);"
If the NPM module noble
is installed, it'll be used to scan for Bluetooth LE UART devices like Puck.js. It's an optional dependency, so will be installed if possible - but if not you just won't get BLE support.
If it is installed and you don't want it, you can use ./espruino --no-ble
to disable it for the one command, or can remove the module with npm remove noble
.
On linux, you'll need to run as superuser to access Bluetooth Low Energy. To avoid this you need to give node.js the relevant privileges with:
sudo setcap cap_net_raw+eip $(eval readlink -f `which node`)
This is the NPM module espruino
.
Once installed with npm install -g espruino
it contains the following functions:
var esp = require("espruino");
/** Initialise EspruinoTools and call the callback.
When the callback is called, the global variable 'Espruino'
will then contain everything that's needed to use EspruinoTools */
esp.init(callback);
/** Send a file to an Espruino on the given port, call the callback when done (calls 'init' automatically) */
esp.sendFile (port, filename, callback);
/** Execute an expression on Espruino, call the callback with the result (calls 'init' automatically) */
esp.expr(port, expr, callback(result));
/** Flash the given firmware file to an Espruino board (calls 'init' automatically) */
esp.flash(port, filename, callback);
For example, to get the current temperature of the board you can do:
require('espruino').expr('/dev/ttyACM0', 'E.getTemperature()', function(temp) {
console.log('Current temperature is '+temp);
});
Note: this module is currently prints a lot of debug
information to console.log
when working.
If you want to set specific options, for example Baud rate, initialise everything explicitly with init
, set the options, and then call the function you need:
var esp = require("espruino");
esp.init(function() {
Espruino.Config.BAUD_RATE = "115200";
esp.sendFile(port, filename, function() {
console.log('Done!');
})
});
This isn't well documented right now, but basically:
index.js
Espruino.Core
or Espruino.Plugins
processors
with Espruino.addProcessor
. For instance you might register for "transformForEspruino"
in which case you can do something to the JS code before it's finally sent to Espruino.Espruino.Core.X
or Espruino.Plugins.Y
to do what you wantIt's not ideal for node.js, but was designed to run in the Web browser for the Espruino Web IDE
Contributions would he hugely appreciated - sadly I'm stretched a bit thin with Espruino, Espruino's modules, the Web IDE and forum, so this isn't getting the love it deserves.
Please be aware that the Espruino Web IDE (and even a truly online version of the Web IDE depend heavily this code - so try not to do anything that will break them).
core
, Plugins go in plugins
. See plugins/_examplePlugin.js
for an example layoutEspruino.Core.Serial.devices
array when loaded.Espruino.addProcessor
. For instance you can use Espruino.addProcessor("transformForEspruino", function (data,callback) { .. })
and can modify code before it is sent to Espruino. Events types are documented at the top of espruino.js
Espruino.Config.FOO
and is changed with Espruino.Config.set("FOO", value)
. Espruino.Core.Config.add
can be used to add an option to the Settings menu.There are other tools available to program Espruino:
Note: while other tools exist, this EspruinoTools module and the Web IDE which uses it are maintained alongside the Espruino firmware, and tend to have support for various features and edge cases that other tools might not.
FAQs
Command Line Interface and library for Communications with Espruino JavaScript Microcontrollers
The npm package espruino receives a total of 21 weekly downloads. As such, espruino popularity was classified as not popular.
We found that espruino demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.