
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
nativescript-opentok
Advanced tools
A Nativescript plugin for the OpenTok iOS and (coming soon Android) SDK.
OpenTok: https://tokbox.com/developer/
Node Package Manager (NPM)
npm install nativescript-opentok --save
Import OpenTok nativescript plugin into your Nativescript page (i.e. main-page.ts)
import {TNSOTSession} from 'nativescript-opentok';
Instantiate the OpenTok class and initialize using your API key and session id. Connect using a valid token and publish to the page you want to append the video stream to.
this.session = new TNSOTSession('API_KEY');
this.session.create(this.getSessionID()).then((result) => {
this.session.connect(this.getToken()).then((result) => {
this.session.publish(100, 100, 100, 100);
}, (err) => {
console.log('Error connecting');
});
}, (err) => {});
this._session.instance().sessionEvents.on('sessionDidConnect', (eventData) => {
console.log('sessionDidConnect', eventData);
});
private getSessionID() {
return '';// session id string
}
private getToken() {
return '';// token string
}
TNS
stands for Telerik NativeScriptFAQs
Integrates OpenTok for NativeScript.
The npm package nativescript-opentok receives a total of 16 weekly downloads. As such, nativescript-opentok popularity was classified as not popular.
We found that nativescript-opentok demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.