
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
silly-node-pcsclite
Advanced tools
Bindings over pcsclite to access Smart Cards. Starting with version 0.4.0 it works in Linux, OS X and Windows.
You'll need a node version installed in the system. You have several options:
Download and install it from the node website
Install it from your own distro. For the Debian users:
apt-get install nodejs nodejs-legacy
Use nodesource repository for different distros.
In order to install the package you need to have installed in the system the pcsclite libraries. For example, in Debian/Ubuntu:
apt-get install libpcsclite1 libpcsclite-dev
Once they are installed just run:
npm install pcsclite
To run any code you will also need to have installed the pcsc daemon:
apt-get install pcscd
var pcsc = require('pcsclite');
var pcsc = pcsc();
pcsc.on('reader', function(reader) {
console.log('New reader detected', reader.name);
reader.on('error', function(err) {
console.log('Error(', this.name, '):', err.message);
});
reader.on('status', function(status) {
console.log('Status(', this.name, '):', status);
/* check what has changed */
var changes = this.state ^ status.state;
if (changes) {
if ((changes & this.SCARD_STATE_EMPTY) && (status.state & this.SCARD_STATE_EMPTY)) {
console.log("card removed");/* card removed */
reader.disconnect(reader.SCARD_LEAVE_CARD, function(err) {
if (err) {
console.log(err);
} else {
console.log('Disconnected');
}
});
} else if ((changes & this.SCARD_STATE_PRESENT) && (status.state & this.SCARD_STATE_PRESENT)) {
console.log("card inserted");/* card inserted */
reader.connect({ share_mode : this.SCARD_SHARE_SHARED }, function(err, protocol) {
if (err) {
console.log(err);
} else {
console.log('Protocol(', reader.name, '):', protocol);
reader.transmit(new Buffer([0x00, 0xB0, 0x00, 0x00, 0x20]), 40, protocol, function(err, data) {
if (err) {
console.log(err);
} else {
console.log('Data received', data);
reader.close();
pcsc.close();
}
});
}
});
}
}
});
reader.on('end', function() {
console.log('Reader', this.name, 'removed');
});
});
pcsc.on('error', function(err) {
console.log('PCSC error', err.message);
});
The PCSCLite object is an EventEmitter that notifies the existence of Card Readers.
Error Object. The error.CardReader. A CardReader object associated to the card reader detectedEmitted whenever a new card reader is detected.
It frees the resources associated with this PCSCLite instance. At a low level it calls SCardCancel so it stops watching for new readers.
An object containing all detected readers by name. Updated as readers are attached and removed.
The CardReader object is an EventEmitter that allows to manipulate a card reader.
Error Object. The error.Emitted when the card reader has been removed.
Object.
SCardGetStatusChangeEmitted whenever the status of the reader changes.
Object Optional
Number Shared mode. Defaults to SCARD_SHARE_EXCLUSIVENumber Preferred protocol. Defaults to SCARD_PROTOCOL_T0 | SCARD_PROTOCOL_T1Function called when connection operation ends
ErrorNumber Established protocol to this connection.Wrapper around SCardConnect. Establishes a connection to the reader.
Number. Reader function to execute. Defaults to SCARD_UNPOWER_CARDFunction called when disconnection operation ends
ErrorWrapper around SCardDisconnect. Terminates a connection to the reader.
Buffer input data to be transmittedNumber. Max. expected length of the responseNumber. Protocol to be used in the transmissionFunction called when transmit operation ends
ErrorBufferWrapper around SCardTransmit. Sends an APDU to the smart card contained in the reader connected to.
Buffer input data to be transmittedNumber. Control code for the operationNumber. Max. expected length of the responseFunction called when control operation ends
ErrorBufferWrapper around SCardControl. Sends a command directly to the IFD Handler (reader driver) to be processed by the reader.
It frees the resources associated with this CardReader instance. At a low level it calls SCardCancel so it stops watching for the reader status changes.
FAQs
Bindings over PC/SC to access Smart Cards
We found that silly-node-pcsclite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.