
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Attendance Machine Library for NodeJS with a connection to the network using the UDP protocol and port 4370
Attendance Machine Library for NodeJS with a connection to the network using the UDP protocol and port 4370
Install with:
npm install zklib
const ZKLib = require('zklib');
ZK = new ZKLib({
ip: '192.168.5.11',
port: 4370,
inport: 5200,
timeout: 5000,
});
// connect to access control device
ZK.connect(function(err) {
if (err) throw err;
// read the time info from th device
ZK.getTime(function(err, t) {
// disconnect from the device
ZK.disconnect();
if (err) throw err;
console.log("Device clock's time is " + t.toString());
});
});
| Option | Required | Values | Default |
|---|---|---|---|
| ip | yes | string | |
| port | - | number | 4370 |
| inport | yes | number | |
| timeout | - | number | - |
| attendanceParser | - | [ 'legacy', 'v6.60' ] | 'legacy' |
| connectionType | - | [ 'udp', 'tcp' ] | 'udp' |
Currently only getAttendance was tested with TCP
ZK.getTime(function(err, time) {
if (err) throw err;
console.log("Device clock's time is " + time.toString());
});
yarn test
sh ./scripts/release-branch.sh. This will create the x.x.x branch and assign tag x.x.x to HEAD and push it all to git originBased on php_zklib (https://github.com/dnaextrim/php_zklib)
FAQs
Attendance Machine Library for NodeJS with a connection to the network using the UDP protocol and port 4370
The npm package zklib receives a total of 372 weekly downloads. As such, zklib popularity was classified as not popular.
We found that zklib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.