Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
m3u8stream
Advanced tools
The m3u8stream npm package is used to create a readable stream from an M3U8 playlist, which is commonly used for HTTP Live Streaming (HLS). This allows you to download or process media streams in a programmatic way.
Stream from M3U8 URL
This feature allows you to create a readable stream from an M3U8 URL and pipe it to a writable stream, such as a file. In this example, the media stream from the M3U8 URL is saved to 'output.ts'.
const m3u8stream = require('m3u8stream');
const fs = require('fs');
const stream = m3u8stream('http://example.com/playlist.m3u8');
stream.pipe(fs.createWriteStream('output.ts'));
Handle Stream Events
This feature allows you to handle various events emitted by the stream, such as 'progress' and 'end'. This can be useful for tracking the download progress and performing actions when the download is complete.
const m3u8stream = require('m3u8stream');
const stream = m3u8stream('http://example.com/playlist.m3u8');
stream.on('progress', (segment, totalSegments, downloaded) => {
console.log(`Downloading segment ${segment.num} of ${totalSegments}`);
console.log(`Downloaded: ${downloaded} bytes`);
});
stream.on('end', () => {
console.log('Download complete');
});
Custom Request Options
This feature allows you to pass custom request options, such as headers, to the underlying HTTP requests made by m3u8stream. In this example, a custom User-Agent header is set for the requests.
const m3u8stream = require('m3u8stream');
const fs = require('fs');
const stream = m3u8stream('http://example.com/playlist.m3u8', {
requestOptions: {
headers: {
'User-Agent': 'my-custom-user-agent'
}
}
});
stream.pipe(fs.createWriteStream('output.ts'));
hls.js is a JavaScript library that allows you to play HLS streams in browsers that do not support HLS natively. It is primarily used for client-side playback in web applications, whereas m3u8stream is used for server-side streaming and downloading.
fluent-ffmpeg is a Node.js library for working with FFmpeg, a powerful multimedia framework. It can be used to download and process media streams, including HLS streams. However, it requires FFmpeg to be installed and is more complex to use compared to m3u8stream.
Reads segments from a m3u8 playlist or DASH MPD file into a consumable stream.
const fs = require('fs');
const m3u8stream = require('m3u8stream')
m3u8stream('http://somesite.com/link/to/the/playlist.m3u8')
.pipe(fs.createWriteStream('videofile.mp4'));
Creates a readable stream of binary media data. options
can have the following
begin
- Where to begin playing the video. Accepts an absolute unix timestamp or date and a relative time in the formats 1:23:45.123
and 1m2s
.liveBuffer
- How much buffer in milliseconds to have for live streams. Default is 20000
.chunkReadahead
- How many chunks to preload ahead. Default is 3
.highWaterMark
- How much of the download to buffer into the stream. See node's docs for more. Note that the actual amount buffered can be higher since each chunk request maintains its own buffer.requestOptions
- Any options you want to pass to miniget, such as headers
.parser
- Either "m3u8" or "dash-mpd". Defaults to guessing based on the playlist url ending in .m3u8
or .mpd
.id
- For playlist containing multiple media options. If not given, the first representation will be picked.If called, stops requesting segments, and refreshing the playlist.
Object
- Current segment with the following fields,
number
- numnumber
- sizenumber
- durationstring
- urlnumber
- Total number of segments.number
- Bytes downloaded up to this point.For static non-live playlists, emitted each time a segment has finished downloading. Since total download size is unknown until all segment endpoints are hit, progress is calculated based on how many segments are available.
All miniget events are forwarded and can be listened to from the returned stream.
Converts human friendly time to milliseconds. Supports the format
00:00:00.000 for hours, minutes, seconds, and milliseconds respectively.
And 0ms, 0s, 0m, 0h, and together 1m1s.
time
- A string (or number) giving the user-readable input dataCurrently, it does not support encrypted media segments. This is because the sites where this was tested on and intended for, YouTube and Twitch, don't use it.
This does not parse master playlists, only media playlists. If you want to parse a master playlist to get links to media playlists, you can try the m3u8 module.
npm install m3u8stream
Tests are written with mocha
npm test
FAQs
Reads segments from a m3u8 or dash playlist into a consumable stream.
The npm package m3u8stream receives a total of 142,681 weekly downloads. As such, m3u8stream popularity was classified as popular.
We found that m3u8stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.