
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
node-red-contrib-knx
Advanced tools
KNX for node-red, utilizing pure JavaScript KNXnet/IP driver (both works: tunelling & routing)
KNX/eib nodes for node-red.
Inspired by https://github.com/ekarak/node-red-contrib-eibd.
KNX for node-red, utilizing pure JavaScript KNXnet/IP driver (working in tunneling mode). Uses the pure JavaScript implementation of eib/knx driver for Node.JS (https://github.com/estbeetoo/knx.js).
From inside your node-red directory:
npm install node-red-contrib-knx
It includes three nodes:
knx-controller
: a unique CONFIG node that holds connection configuration for knx and will acts as the encapsulator for KNX access. As a node-red 'config' node, it cannot be added to a graph, but it acts as a singleton object that gets created in the the background when you add an 'knx' or 'knx-device' node and configure it accordingly.
knx-out
: KNX/EIB output node that can send KNX to arbitrary GA's and datatypes, so it can be used with function blocks.
knx-in
: KNX/EIB listener node, who emits flow messages based on activity on the KNX bus:
Both use the same message format, an example message follows:
{
"topic":"write",
"payload":{
"srcphy":"1.1.100",
"dstgad":"5/0/2",
"dpt":"1",
"value":0
}
}
topic
is: telegram type, it could be:
read
- read request
write
- to update GA's value
payload
contains:
srcphy
: source physical address (the device that sent the KNX/EIB telegram) - this information is only emitted by knx-in, and will be ignored by knx-out (no address spoofing, you naughty haxx0r!)
dstgad
: destination group address (the function that this telegram refers to eg. front porch lights) - REQUIRED
dpt
: datapoint type (1 for booleans, 5 for 4-bit dimming setpoints etc) - defaults to 1 for boolean on/off GA's
value
: the destination group address's value conveyed in the telegram. REQUIRED when telegram type is write
. Otherwise, telegram type is read
.
Right now it not tested in all directions, but tunnelling mode (only write commands) are working. It tested with KNXnet/IP routers: ABB IPR/S 2.1, Weinzierl BAOS 771
###'knx-in' and 'knx-out' node configuration:
###'knx-controller' CONFIG node configuration:
According to official documentation: http://nodered.org/docs/getting-started/adding-nodes.html
FAQs
KNX for node-red, utilizing pure JavaScript KNXnet/IP driver (both works: tunelling & routing)
The npm package node-red-contrib-knx receives a total of 29 weekly downloads. As such, node-red-contrib-knx popularity was classified as not popular.
We found that node-red-contrib-knx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.