
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
prismarine-inspector
Advanced tools
Minecraft protocol packet viewer using Chrome DevTools.
Supports mineflayer, node-minecraft-protocol, prismarine-proxy and bedrock-protocol.
If you have Chrome installed, you can use your existing Chrome browser or a bundled copy of DevTools.
As a developer tool, you probably want to install it globally:
npm install -g prismarine-inspector
or usable with npx if you just want to run the standalone client (see below):
npx prismarine-inspector
The default export takes emitter and options arguments. If useBundledDevTools is false you will get a link to open in Chrome, otherwise if true you will get an Electron window.
netlog(emitter, options)
const netlog = require('prismarine-inspector')
const mineflayer = require('mineflayer')
const bot = mineflayer.createBot({ 'host': 'localhost' })
netlog(bot, { useBundledDevTools: false })
// ...
bot.on('spawn', () => console.log('spawned'))
See examples/
const nmp = require('minecraft-protocol')
const netlog = require('prismarine-inspector')
const client = nmp.createClient(...)
netlog(client)
const bp = require('bedrock-protocol')
const netlog = require('prismarine-inspector')
const client = bp.createClient(...)
netlog(client)
The package comes with a basic standalone client for quick debugging with limited functionality.
Install the package locally or globally and run:
npx prismarine-inspector
You will get a small wizard screen to setup a simple proxy. The server you are connecting to must be offline.
Thanks to @kdzwinel's betwixt for the baseline implementation
Enabling the Name, Method and Protocol tabs will show you the packet name, time of packet send, time since last packet, and Size of a packet. The colors indicate which side the packet is bound to. When using Chrome DevTools, the XHR and Script categories correspond to Clientbound/Serverbound (we can't change them there).

(repo formerly known as MC-NetLog)
FAQs
Minecraft network packet logger
We found that prismarine-inspector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.