
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
The SignalWire JavaScript SDK transforms your standard browser into a realtime media engine, enabling developers to directly make audio and video calls to phone numbers, SIP endpoints, and other browsers. Using the JavaScript SDK you can add immersive, scalable communication - from video conferences and softphones to click-to-call and mobile gaming - all available right in your own web pages and applications.
SignalWire's simple and powerful authentication system, using JWT, allows you to set granular permissions, enabling some of your users to only join conference calls, while others could list on-going calls and jump in to assist from a support dashboard... the possibilities are endless.
Read the implementation documentation, guides and API Reference at the official SignalWire JavaScript SDK Documentation site.
SignalWire JavaScript SDK is open source and maintained by the SignalWire team, but we are very grateful for everyone who has contributed and assisted so far.
If you'd like to contribute, feel free to visit our Slack channel and read our developer section to get the code running in your local environment.
The JavaScript SDK is a package inside the signalwire-js monorepo. To setup the dev environment follow these steps:
main
for your change.npm install
to install global dependencies.cd packages/js
.SignalWire JavaScript SDK follows Semantic Versioning 2.0 as defined at http://semver.org.
@signalwire/js
is copyright © 2018-2021 SignalWire. It is free software, and may be redistributed under the terms specified in the MIT-LICENSE file.
FAQs
Unknown package
The npm package nihilat receives a total of 0 weekly downloads. As such, nihilat popularity was classified as not popular.
We found that nihilat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.