
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
The performance gain comes from buffering packets before sending them- eventually sending batches instead of individual packages. The more traffic getting processed, the better the improvement. Many strategies are offered as routines. You can read more about the packet buffering algorithm here
Install the core package
npm install kalm
Install the transport layer ('tcp' for example)
npm install @kalm/tcp
Server
const kalm = require('kalm');
const ws = require('@kalm/ws');
const server = kalm.listen({
port: 8800,
transport: ws(),
routine: kalm.routines.tick({ hz: 5 }), // Sends packets at a frequency of 5 Hz (200ms)
host: '0.0.0.0',
});
server.on('connection', (client) => {
client.subscribe('channel1', (body, context) => {
// When receiving messages from this client on "channel1"
console.log(body) //
console.log(context) //
});
// Sends a message to all clients on "channel2"
server.broadcast('channel2', 'some message');
});
Client
const kalm = require('kalm');
const ws = require('@kalm/ws');
const client = kalm.connect({
host: '0.0.0.0',
port: 8800,
transport: ws(),
routine: kalm.routines.realtime(),
});
client.on('connect', () => {
client.subscribe('channel1', (body, context) => {
// When receiving messages from the server on "channel1"
console.log(body); //
console.log(context); //
});
// Sends a message to the server on "channel2"
client.write('channel2', 'hello world');
});
To see working implementations, check out our examples folder.
Kalm uses the NODE_DEBUG
environment variable. Just include kalm
in your value.
Example:
NODE_DEBUG=net,kalm node myApp.js
Kalm servers offers events to track when packets are processed by routines or when a raw frame is received.
Server Event | Payload | Description |
---|---|---|
error | Error | (server, client) Emits on errors. |
ready | void | (server) Indicates that the server is now actively listening for new connections |
connection | Client | (server) Indicates that a client has successfully connected |
Kalm clients offers events to track when packets are processed by routines or when a raw frame is received.
Client Event | Payload | Description |
---|---|---|
error | Error | (server, client) Emits on errors. |
connect | void | (client) Indicates that a client has successfully connected |
disconnect | void | (client) Indicates that a client has disconnected |
frame | { body: Partial<RawFrame>, payloadBytes: number } | (client) Triggered when receiving payloads, can be used to intercept messages from non-kalm counterparts. |
npm test
npm run bench
This project exists thanks to all the people who contribute. [Contribute].
If you think of something that you want, open an issue or file a pull request, we'll be more than happy to take a look!
Apache 2.0 2025 Frederic Charette
FAQs
The socket optimizer
We found that kalm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.