
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A library of React components for building Web Audio graphs.
👉 make Web Audio graph code more readable and representative of the graph shape
👉 make it easier to create reusable graphs
👉 make state management easier with React's one-way data bindings and single source of state
👉 represent any arbitrary directed graphs in JSX
👉 support all non-deprecated audio nodes including AudioWorklet
👉 allow interspersed HTML components in audio components
npm install r-audio
Stereo waveshaper + amplitude modulation on a WAV loop
<RAudioContext debug={true} onInit={ctx => this.audioContext = ctx}>
<RPipeline>
<RBufferSource buffer={this.state.buffer} loop/>
<RSplitChannels channelCount={2}>
<RPipeline>
<RWaveShaper curve={this.makeDistortionCurve(200)} />
<RConvolver buffer={this.state.buffer} />
<RDynamicsCompressor threshold={-50} knee={40}/>
<RGain gain={.5} />
</RPipeline>
<RPipeline>
<ROscillator frequency={1} type="sine" detune={0} connectToParam="gain" />
<RGain gain={1} />
</RPipeline>
</RSplitChannels>
</RPipeline>
</RAudioContext>
npm install
npm run dev
The demo page will be served at localhost:8080
. Use a recent version of Chrome or Firefox for the best experience.
Firefox Web Audio developer tool is especially handy (bear in mind Firefox does not support AudioWorklet as of 17 April 2018).
FAQs
A library of React components for building Web Audio graphs.
The npm package r-audio receives a total of 0 weekly downloads. As such, r-audio popularity was classified as not popular.
We found that r-audio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.