
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
extendable-media-recorder
Advanced tools
An extendable drop-in replacement for the native MediaRecorder.
An extendable drop-in replacement for the native MediaRecorder.
This package provides (a part of) the MediaRecorder API as defined by the MediaStream Recording specification. If possible it will use the native implementation which is available in Chrome and Firefox.
In addition this package also allows to define custom encoders. Those encoders can be used to render files which are not supported by any browser so far. This does currently only work for audio encoders.
extendable-media-recorder
is available on npm and can be installed as usual.
npm install extendable-media-recorder
It exports the MediaRecorder
constructor. It can be used like the native implementation. The following example will use the default encoder that is defined by the browser.
import { MediaRecorder } from 'extendable-media-recorder';
const stream = await navigator.mediaDevices.getUserMedia({ audio: true });
const mediaRecoder = new MediaRecorder(stream);
extendable-media-recorder
also exports a register()
function which can be used to define custom encoders. One predefined encoder is available as the extendable-media-recorder-wav-encoder
package. It can be used as shown here.
import { MediaRecorder, register } from 'extendable-media-recorder';
import { connect } from 'extendable-media-recorder-wav-encoder';
await register(await connect());
const stream = await navigator.mediaDevices.getUserMedia({ audio: true });
const mediaRecoder = new MediaRecorder(stream, { mimeType: 'audio/wav' });
Internally two different techniques are used to enable custom encoders. In Chrome the native MediaRecorder is used to encode the stream as webm file with pcm encoded audio. Then a minimal version of ts-ebml is used to parse that pcm data to pass it on to the encoder. In other browsers the Web Audio API is used to get the pcm data of the recorded audio.
FAQs
An extendable drop-in replacement for the native MediaRecorder.
The npm package extendable-media-recorder receives a total of 54,258 weekly downloads. As such, extendable-media-recorder popularity was classified as popular.
We found that extendable-media-recorder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.