Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
node-red-contrib-n2n
Advanced tools
A Node-RED node that provides automatic links between different topics on Node-RED instances within multicast range.
A Node-RED node that provides automatic links between different topics on Node-RED instances within UDP multicast range.
Only use this for short messages like data readings.
Run the following command in your Node-RED user directory - typically ~/.node-red
npm install node-red-contrib-n2n
Uses multicast to send packets - if you have multiple network adapters you may need to set a static multicast route - for example
Linux - sudo route add -net 225.0.18.83 netmask 255.255.255.255 dev eth0
Mac - sudo route add -net 225.0.18.83/32 -interface en0
where eth0/en0 is the network interface you wish to use.
Only use this for short messages like data readings.
Discover other Node-RED devices on the network and open channels from them.
You can specify what topics are of interest. The node will "request" these from remote instances. The remote node will only send data if the message has a msg.topic that matches.
Topics of interest are specified by a regex string.
Also outputs msg.host - the hostname of the sending node, and msg.hostip - the ip of the sending node.
The network interface for the multicast can be fixed if required. If not it will try to bind to all available interfaces - which will probably work fine for input - but may not necessarily route out correctly - see above for how to set a static multicast route.
Note: the MTU may well restrict the message to around 1500 characters. Only use this for short messages like data readings.
FAQs
A Node-RED node that provides automatic links between different topics on Node-RED instances within multicast range.
The npm package node-red-contrib-n2n receives a total of 1 weekly downloads. As such, node-red-contrib-n2n popularity was classified as not popular.
We found that node-red-contrib-n2n demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.