
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
media-search
Advanced tools
A lightweight package for searching images and YouTube videos. Provides simple Typescript APIs to search for images using Google Images and videos using YouTube's search API.
A lightweight package for searching images and YouTube videos. Provides simple Typescript APIs to search for images using Google Images and videos using YouTube's search API.
npm install media-search
You can also install media-search
with pnpm, yarn, or slnpm
import { searchImage, searchYoutube } from 'media-search'
// Search for images
const images = await searchImage({ keyword: 'cats' })
// Returns array of image results with URLs and dimensions
// Search YouTube
const videos = await searchYoutube({
keyword: 'cats',
limit: 10,
options: [{ type: 'video' }],
})
// Returns YouTube search results with video details
export function searchImage(options: {
keyword: string
}): Promise<ImageSearchResult>
export function searchYoutube(options: {
keyword: string
playlist?: boolean
limit?: number
options?: { type: 'video' | 'channel' | 'playlist' | 'movie' }[]
}): Promise<YoutubeSearchResult>
export type ImageSearchResult = {
/** e.g. 'https://images.squarespace-cdn.com/content/v1/607f89e638219e13eee71b1e/1684821560422-SD5V37BAG28BURTLIXUQ/michael-sum-LEpfefQf4rU-unsplash.jpg' */
url: string
/** e.g. 1667 */
height: number
/** e.g. 2500 */
width: number
}[]
export type YoutubeSearchResult = {
items: {
/** e.g. 'aZ9-35Gmt5k' */
id: string
type: 'video' | 'channel' | 'playlist' | 'movie'
thumbnail: {
thumbnails: {
url: string
width: number
height: number
}[]
}
title: string
/** e.g. 'Birder King' */
channelTitle: string
shortBylineText: {
runs: {
/** e.g. 'Birder King' */
text: string
navigationEndpoint: {
commandMetadata: {
webCommandMetadata: {
/** e.g. '/@BirderKing' */
url: string
/** e.g. 'WEB_PAGE_TYPE_CHANNEL' */
webPageType: string
/** e.g. '/youtubei/v1/browse' */
apiUrl: string
}
}
}
}[]
}
/** empty string if is live */
length:
| ''
| {
accessibility: {
accessibilityData: {
/** e.g. '15 分鐘' */
label: string
}
}
/** e.g. '15:00' */
simpleText: string
}
isLive: boolean
}[]
nextPage: {
nextPageToken: string
nextPageContext: {
context: {
client: {
/** e.g. 'zh-HK' */
hl: string
/** e.g. 'HK' */
gl: string
}
}
continuation: string
}
}
}
This project is licensed with BSD-2-Clause
This is free, libre, and open-source software. It comes down to four essential freedoms [ref]:
FAQs
A lightweight package for searching images and YouTube videos. Provides simple Typescript APIs to search for images using Google Images and videos using YouTube's search API.
The npm package media-search receives a total of 1 weekly downloads. As such, media-search popularity was classified as not popular.
We found that media-search demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.