Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
node-fauxmo
Advanced tools
Make fake WeMo devices. Another Node.JS port of fauxmo, borrowing heavily from fauxmojs
Make fake WeMo devices! Another Node.JS port of fauxmo, borrowing heavily from fauxmojs. This library gives you the ability to easily control anything you'd like from your Alexa and Siri enabled devices. (Siri support requires Homebridge and homebridge-platform-wemo) You can control an array of relays connected to a raspberry pi or even start, stop, and get the status of a service on your computer. I've added the ability to get the status of a "fake device" from an external source. Enjoy!
npm install node-fauxmo
This example demonstrates the creation of 4 fake devices. The fourth uses the optional "statusHandler" method allowing the fake device to query other sources for it's status.
'use strict';
const FauxMo = require('node-fauxmo');
var dev4status = 0;
var dev4statushandler = function() {
return dev4status;
}
var dev4handler = function(action) {
dev4status = action;
}
let fauxMo = new FauxMo(
{
devices: [{
name: 'Fake Device 1',
port: 11000,
handler: function(action) {
console.log('Fake Device 1:', action);
}
},
{
name: 'Fake Device 2',
port: 11001,
handler: function(action) {
console.log('Fake Device 2:', action);
}
},
{
name: 'Fake Device 3',
port: 11002,
handler: function(action) {
console.log('Fake Device 3:', action);
}
},
{
name: 'Fake Device 4',
port: 11003,
handler: function(action) {
console.log('Fake Device 4:', action);
dev4handler(action);
},
statusHandler: function(callback) {
callback(dev4statushandler());
}
}
]
});
FAQs
Make fake WeMo devices. Another Node.JS port of fauxmo, borrowing heavily from fauxmojs
We found that node-fauxmo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.