Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Command Line Interface and library for Communications with Espruino JavaScript Microcontrollers
This repository contains a set of tools for the Espruino JavaScript Interpreter. Mainly, it is used by the Espruino Web IDE although hopefully it is portable enough to be used by other tools such as command-line interfaces.
When installed as a Node module with npm install -g espruino
you get a command-line tool called espruino
:
USAGE: espruino ...options... [file_to_upload.js]
-h,--help : Show this message
-v,--verbose : Verbose
-q,--quiet : Quiet - apart from Espruino output
-m,--minify : Minify the code before sending it
-p,--port /dev/ttyX : Specify port(s) to connect to
-f firmware.bin : Update Espruino's firmware to the given file
Espruino must be in bootloader mode
-e command : Evaluate the given expression on Espruino
If no file to upload is specified but you use -e,
Espruino will not be reset
For instance:
# Write a program to Espruino (IF Espruino is the only serial port reported)
espruino myprogram.js
# Otherwise you'll want to specify the exact port first
espruino -p /dev/ttyACM0 myprogram.js
This is the NPM module espruino
It contains the following functions:
var esp = require("espruino");
/** Initialise EspruinoTools and call the callback.
When the callback is called, the global variable 'Espruino'
will then contain everything that's needed to use EspruinoTools */
esp.init(callback);
/** Send a file to an Espruino on the given port, call the callback when done */
esp.sendFile (port, filename, callback);
/** Execute an expression on Espruino, call the callback with the result */
esp.expr(port, expr, callback(result));
/** Flash the given firmware file to an Espruino board. */
esp.flash(port, filename, callback);
For example, to get the current temperature of the board you can do:
require('espruino').expr('/dev/ttyACM0', 'E.getTemperature()', function(temp) {
console.log('Current temperature is '+temp);
});
Note: this module is currently a bit noisy - it prints a lot of debug
information to console.log
when working.
This isn't well documented right now, but basically:
Espruino.Core
or Espruino.Plugins
It's not ideal for node.js, but was designed to run in the Web browser for the Espruino Web IDE
While EspruinoTools has been in use in the Web IDE for a while, the command-line tool still needs a lot of work.
Main things that need attention at the moment are:
modules
folder to avoid confusion with node.console.log
and replace it with something else that can be easily disabled when used as a moduleCool stuff would be:
-w
?) to watch a file and re-upload it when it has changedarm-node-eabi-gcc
is installed.Contributions would he hugely appreciated - sadly I'm stretched a bit thin with Espruino, Espruino's modules, the Web IDE and forum, so this isn't getting the love it deserves.
Please be aware that the Espruino Web IDE (and even a truly online version of the Web IDE depend heavily this code - so try not to do anything that will break them).
core
, Plugins go in plugins
. See plugins/_examplePlugin.js
for an example layoutEspruino.addProcessor
. For instance you can use Espruino.addProcessor("transformForEspruino", function (data,callback) { .. })
and can modify code before it is sent to Espruino. Events types are documented at the top of espruino.js
Espruino.Config.FOO
and is changed with Espruino.Config.set("FOO", value)
. Espruino.Core.Config.add
can be used to add an option to the Settings menu.FAQs
Command Line Interface and library for Communications with Espruino JavaScript Microcontrollers
The npm package espruino receives a total of 21 weekly downloads. As such, espruino popularity was classified as not popular.
We found that espruino demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.