
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
lgtv2mqtt2
lgtv2mqtt2
connects WebOS-based TVs with MQTT, exposing a couple of read-write properties to control the TV.
There's lgtv2mqtt
but it didn't work for me, and none of the WebOS libraries on GitHub did either, other than the one bundled with homebridge-webos-tv
which this project re-uses.
I only exposed the endpoints that I care about, and this repository is provided as-is - feel free to fork and change things and send PRs.
npm install lgtv2mqtt2
(optionally with -g
if you want it to be available globally)~/.mqtt-config.json
containing:{
host: "MQTT_BROKER_ADDRESS",
username: "MQTT_BROKER_USERNAME",
password: "MQTT_BROKER_PASSWORD"
}
~/.lgtv-config.json
containing:{
ip: "LGTV_IP",
mac: "LGTV_MAC",
mqttBase: "MQTT_BASE_PATH",
}
mqttBase
is the path under which the properties will be storedFirst, run lgtv2mqtt2
.
The tool creates a couple of paths under the mqttBase
(below). Their values are writable (which updates the TV state), and they react to TV state changes (say from a TV remote) and update the values in MQTT:
/power
["on" | "off"]
/screen
["on" | "off"]
/volume
0 - 100
/backlight
0 - 100
/input
com.webos.app.hdmi[N]
FAQs
connect WebOS LG TV with MQTT
We found that lgtv2mqtt2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.