Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Package for running LAME in a Web Worker. LAME makes it easy to encode and decode MP3 files. See example.html
for an example that records audio from the microphone and encodes it as MP3 in real-time, then lets the user download it.
Using this library is very simple. Assuming you have an HTML file with lame.js
and lame.worker.js
in the same directory, you can do the following:
<script src="lame.js"></script>
<script>
var lame = lameworker();
lame.getVersion(function (error, version) {
console.log('Using LAME v' + version);
});
</script>
See dist/example.html
for a full example.
If you're using a toolchain that simulates a CommonJS environment, you can import this package instead of using the global from dist/lame.js
:
var lameworker = require('lameworker');
// Note that you still need to refer to a stand-alone worker file.
var lame = lameworker('/static/lame.worker.js');
lame.getVersion(function (error, version) {
console.log('Using LAME v' + version);
});
You can find the stand-alone worker file as dist/lame.worker.js
in this package.
There are some obvious improvements to be done still:
Blob
instance once the encoding is completeMake sure you have Emscripten set up on your system, then run make
.
FAQs
Package for running LAME MP3 in a Web Worker.
The npm package lameworker receives a total of 0 weekly downloads. As such, lameworker popularity was classified as not popular.
We found that lameworker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.