
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
node-red-contrib-flic-buttons
Advanced tools
A Node-RED node to interact with the flic.io BLE buttons. Originally created by hardilib, this is actually a fork from osos's version, which added an option for auto-disconnect timeout to save battery life in the Flic buttons.
This fork includes two major upgrades:
See change log for full details.
This node requires the fliclib-linux-hci daemon to handle the low level comunication with the buttons. You will need to install this before you start:
git clone https://github.com/50ButtonsEach/fliclib-linux-hci.git
you can either start the daemon manually:
cd bin/armv6l/
sudo ./flicd -f flic.sqlite3
or you can edit /etc/rc.local to start the daemon on boot:
sudo nano /etc/rc.local
Add the following line just before the exit 0:
sleep 10 && /home/pi/git/fliclib-linux-hci/bin/armv6l/./flicd -d -l /var/log/flic.log -f /home/pi/git/fliclib-linux-hci/bin/armv6l/flic.sqlite3 &
(obviously change the paths to match where you have installed)
Buttons need to be paired before you can use this node at the moment. We do this using the scanwizard.js located in the lib folder.
daemon
are runningnode-red-contrib-flic-buttons/lib
node scanwizard.js
Each flic node requires you specify a button and at least one click type. The button is configured with a configuration node that can be shared amounst multiple flic nodes.
The button config node takes the following parameters:
The node emits a msg.payload
that looks like this
{
"deviceId":"80:E4:DA:70:XX:XX",
"queued":true,
"timeDiff":0,
"clickType":"ButtonDown"
}
ClickType can be:
ButtonDown
- triggered as soon as the button is pressed, regardless of single, double, or hold. (Note: will trigger twice during a double click operation)ButtonUp
- triggered as soon as the button is released, regardless of single, double, or hold. (Note: will trigger twice during a double click operation)ButtonClick
- triggered after the button is released and was held for at most 1 secondButtonSingleClick
- triggered after the button is clicked onceButtonDoubleClick
- triggered after the button is clicked twice (time between clicks is at most 0.5 seconds)ButtonHold
- triggered immediately once the button is held for at least 1 second[2.0.0] - 2025-03-18
A major revamp was done to ensure the connection to the flic server is more reliable and robust. To do this, a flic server config node was added, which points to the flicd server. This must be set as a property for each flic node.
Buffer()
constructorFAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.