Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
node-soundtouch
Advanced tools
node-soundtouch is a Node.js library that implements the Bose Soundtouch API.
It is currently in an alpha state and only implements as much of the API as I currently need. Eventually though the intent is to support the full API.
This library is authored in TypeScript and compiled into ES6. It uses ES6 promises and can be used with async/await or promise chaining.
npm install --save node-soundtouch
This package includes TypeScript typings that should be automatically detected.
Below is an example in ES6/TypeScript
import {DiscoveryService, Key} from "node-soundtouch";
const device = await DiscoveryService.findDevice("My Device");
if (device) {
await device.setVolume(30);
await device.pressKey(Key.ShuffleOn);
await device.powerOn();
await device.pressKey(Key.Preset1);
}
Contributions are welcome, though I do have a vision of how I want this project to reach v1.0 so feel free to open an issue before creating a pull request to see if we're on the same page.
FAQs
Bose Soundtouch API for node.js
The npm package node-soundtouch receives a total of 0 weekly downloads. As such, node-soundtouch popularity was classified as not popular.
We found that node-soundtouch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.