
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
This library enables easy access to an iKettle. Much of the knowledge for interacting with the iKettle was from Mark Cox's blog article, "Hacking a Wifi Kettle".
var iKettle = require("ikettle");
Currently the functionality is read-only, ie. iKettle state can be read and is updated as the kettle state changes. If it on roadmap to provide write access to kettle state.
Please see the scripts in the examples directory for ways in which this library can be used.
iKettle.connect(port, host, function(err, state) {
if (err) {
return;
}
// Use state model here
});
The default port for the iKettle is 2000
.
Calling connect
will confirm that the host is an iKettle and will retrieve the current state which is used to populate the model.
The callback function follows the nodejs convention, If an error has occurred, the first parameter err
will be an Error
object and model
will be undefined
. If an error has not occurred, err
will be null
and state
will be a Backbone
model.
This state model is held in a Backbone
model. It is provided as a parameter to the connect
callback, or via iKettle.state
.
In depth information on using Backbone models can be found in the Backbone documentation, but basic usecase for using the model:
var is_kettle_on = state.get("on");
state.on("change", function(details) {
var what_changed = details.changes;
});
iKettle.destroy();
This will close the connection to the iKettle and destroy the state model.
Twitter @alistairjcbrown
Code signed using keybase as alistairjcbrown. Verify with keybase dir verify
FAQs
A library for interacting with the iKettle
The npm package ikettle receives a total of 0 weekly downloads. As such, ikettle popularity was classified as not popular.
We found that ikettle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.