
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
homebridge-vorwerk
Advanced tools
A Vorwerk Kobold VR200 and VR300 vacuum robot plugin for homebridge.
This is a plugin for homebridge to control your Vorwerk Kobold VR200 and VR300 vacuum robot. You can download it via npm.
Based on naofireblade's homebridge-neato.
Feel free to leave any feedback here.
npm install -g homebridge
npm install -g homebridge-vorwerk
Add the following information to your config file. Change the values for email and password.
"platforms": [
{
"platform": "VorwerkVacuumRobot",
"email": "YourEmail",
"password": "YourPassword"
}
]
"platforms": [
{
"platform": "VorwerkVacuumRobot",
"token": "YourToken"
}
]
You can get a token using the following two curl commands:
# This will trigger the email sending
curl -X "POST" "https://mykobold.eu.auth0.com/passwordless/start" \
-H 'Content-Type: application/json' \
-d $'{
"send": "code",
"email": "ENTER_YOUR_EMAIL_HERE",
"client_id": "KY4YbVAvtgB7lp8vIbWQ7zLk3hssZlhR",
"connection": "email"
}'
==== wait for the email to be received ====
# this will generate a token using the numbers you received via email
# replace the value of otp 123456 with the value you received from the email
curl -X "POST" "https://mykobold.eu.auth0.com/oauth/token" \
-H 'Content-Type: application/json' \
-d $'{
"prompt": "login",
"grant_type": "http://auth0.com/oauth/grant-type/passwordless/otp",
"scope": "openid email profile read:current_user",
"locale": "en",
"otp": "123456",
"source": "vorwerk_auth0",
"platform": "ios",
"audience": "https://mykobold.eu.auth0.com/userinfo",
"username": "ENTER_YOUR_EMAIL_HERE",
"client_id": "KY4YbVAvtgB7lp8vIbWQ7zLk3hssZlhR",
"realm": "email",
"country_code": "DE"
}'
From the output, you want to copy the id_token
value.
The following config contains advanced optional settings.
The parameter refresh sets an interval in seconds that is used to update the robot state in the background. This is only required for automations based on the robot state. The default value is auto
which means that the update is automatically enabled while cleaning and disabled while not cleaning. You can set a value in seconds e.g. 120
to enable background updates even when the robot is not cleaning. You can also disable background updates completely by setting the value 0
. This might be required if you experience timeouts in the app because you have other home automation apps that are connected to your robot.
The parameter disabled accepts a list of switches/sensors that can be disabled in the neato homekit plugin (e.g. dock, dockstate, eco, schedule, spot).
"platforms": [
{
"platform": "VorwerkVacuumRobot",
"token": "YourToken",
"refresh": "120",
"disabled": ["dock", "dockstate", "eco", "nogolines", "schedule", "spot"]
}
]
If you have another connected vorwerk robot, please tell me about your experience with this plugin.
FAQs
A Vorwerk Kobold VR200 and VR300 vacuum robot plugin for homebridge.
We found that homebridge-vorwerk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.