
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
[](https://circleci.com/gh/sgnl/nodeku)
Discover Roku devices via ssdp
and control the device with methods that perform http
requests to the device.
requirements:
7.0.0 or higher
const Nodeku = require('nodeku')
Nodeku()
.then(device => {
console.log(`device found at: ${ device.ip() }`)
// 'xxx.xxx.xxx.xxx:8060'
return device.apps()
})
.then(apps => {
apps.forEach(app => console.log(app))
// [{ id, name, type, version }, ...]
})
.catch(err => {
console.error(err.stack)
})
$ npm install nodeku
Invoking Nodeku
will return a promise and on success it will pass a device module. This module will contain the methods needed to control a roku device. Commands are sent to the Roku device via HTTP
protocol as found on the docs.
This project uses immutablejs which means all the data structures received through this module will be immutable.
method name | params | return type | details |
---|---|---|---|
.ip() | None | String | network ip and port xxx.xxx.xxx.xxx:8060 |
.apps() | None | List[{}, ...] | list of many objects with props: id, name, type, version |
.active() | None | List[{}] | list with one object with props id, name, type, version |
.info() | None | Map{} | map with too many(29) props |
.keypress('...') | String | Boolean | true if success, false if error |
.keydown('...') | String | Boolean | true if successful, false if error |
.keyup('...') | String | Boolean | true if successful, false if error |
'.icon(1) | Number | Buffer | jpeg image as buffer |
'.launch(1) | Number | Boolean | true if successful, false if error |
Home
Rev
Fwd
Play
Select
Left
Right
Down
Up
Back
InstantReplay
Info
Backspace
Search
Enter
$ npm test
Roku - External Control Service Commands Roku - Keypress Key Values
Only tested on OSX and with Roku3 device. halp?
FAQs
[](https://circleci.com/gh/sgnl/nodeku/tree/master)
The npm package nodeku receives a total of 4 weekly downloads. As such, nodeku popularity was classified as not popular.
We found that nodeku demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.