
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
homebridge-dlink-wifi-smart-plug-dsp-w215
Advanced tools
Custom plugin for controlling D-Link DSP-W215 Wi-Fi Smart Plug
THIS PLUGIN WAS FULLY GENERATED BY CHATGPT. I'm not capable to create or publish an homebridge plugin, so I use AI to made it. In fact ALL the procedure was "supervised" by it.
This Homebridge D-Link Plugin integrates the D-Link smart plug DSP W215 with Homebridge, enabling on/off control and state reporting from HomeKit. This new version was made by GPT 5, and it's more optimized and efficient. This fork adds robust error handling, serialized operations, token-refresh logic (Telnet-based token retrieval when configured), and a configurable logging level.
The original WebSocket client used as a base was created by @Garfonso: https://github.com/Garfonso/dlinkWebSocketClient. Consult their project for low-level details about the device protocol and token extraction.
Place the accessory inside the "accessories" array of your Homebridge config.json. Example:
{
"platforms": [],
"accessories": [
{
"accessory": "DLinkSmartPlug",
"name": "Living Room Plug",
"ip": "192.168.1.50",
"pin": "TELNET",
"useTelnetForToken": true,
"debug": false,
"maxRetries": 5,
"initialRetryDelayMs": 1000,
"tokenUpdateIntervalMs": 300000,
"operationTimeoutMs": 5000,
"forceRestartOnFailure": false,
"childBridge": true
}
]
}
accessory
: must be DLinkSmartPlug (plugin registration name).name
: friendly name shown in HomeKit.ip
: local IP address of the DSP W215 plug.pin
: device token or "TELNET" to indicate the plugin should fetch the token via Telnet client API.useTelnetForToken
: true to enable Telnet token retrieval (recommended if you don't have the static token).debug
: true to enable verbose logging (original behavior). Default: false (only warnings/errors printed).maxRetries
: maximum number of login attempts before deciding failure. Default: 5.initialRetryDelayMs
: initial backoff delay (ms) used for login retries. Default: 1000.tokenUpdateIntervalMs
: periodic token-refresh interval in milliseconds (only when useTelnetForToken=true). Default: 300000 (5 minutes).forceRestartOnFailure
: if true, on certain critical failures the plugin will schedule a process exit to restart (see below). Default: false.childBridge
: boolean override to indicate the accessory is running inside a child bridge. If present, this value is used; otherwise the plugin attempts a best-effort autodetection. Default: absent (autodetect -> false).I manage to work this plugin only with telnet and token "mode". So i recommend you to use it
To avoid uncontrolled Homebridge restarts, the plugin uses a configurable restart policy:
Recommendation: If you run the accessory inside Homebridge's child-bridge mode (a separate process), set childBridge: true
explicitly in the config to make the restart behavior deterministic.
debug: true
— verbose mode. All original informational messages (state changes, token refresh attempts, retries, etc.) will be printed.
debug: false
— quiet mode. Only warnings and errors are logged (recommended for production).
Tokens and sensitive values are never printed to logs
Each log line includes the accessory context where possible. If you want more custom formatting (timestamps, accessory prefix), you can adapt the logging helper in index.js.
When useTelnetForToken is enabled the plugin will:
Note: The plugin intentionally avoids printing token values to logs.
dlink_websocketclient by @Garfonso — the underlying implementation for interacting with the D-Link device
This plugin code and README were generated and refined with the assistance of ChatGPT and then supervised by the maintainer
This plugin is provided as-is. Use at your own risk. The author and contributors take no responsibility for bricked devices, data loss, or other issues resulting from use of this plugin. Review the original dlink_websocketclient license for low-level client licensing.
FAQs
Custom plugin for controlling D-Link DSP-W215 Wi-Fi Smart Plug
The npm package homebridge-dlink-wifi-smart-plug-dsp-w215 receives a total of 142 weekly downloads. As such, homebridge-dlink-wifi-smart-plug-dsp-w215 popularity was classified as not popular.
We found that homebridge-dlink-wifi-smart-plug-dsp-w215 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.