
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
bbb-dlc
Advanced tools
Downloads a BBB lesson as MP4 video, including presentation, audio, webcam and screenshare.
usage: bbb-dlc [-h] [-aw] [-aa] [-kt] [-v] [-ncc] [--version] [--encoder ENCODER] [--audiocodec AUDIOCODEC] [-f FILENAME] URL
Big Blue Button Downloader that downloads a BBB lesson as MP4 video
positional arguments:
URL URL of a BBB lesson
optional arguments:
-h, --help show this help message and exit
-aw, --add-webcam add the webcam video as an overlay to the final video
-aa, --add-annotations
add the annotations of the professor to the final video
-kt, --keep-tmp-files
keep the temporary files after finish
-v, --verbose print more verbose debug informations
-ncc, --no-check-certificate
Suppress HTTPS certificate validation
--version Print program version and exit
--encoder ENCODER Optional encoder to pass to ffmpeg (default libx264)
--audiocodec AUDIOCODEC
Optional audiocodec to pass to ffmpeg (default copy the codec from the original source)
-f FILENAME, --filename FILENAME
Optional output filename
This project is licensed under the terms of the GNU General Public License v2.0. For further information, please look here or here(DE).
This project is based on the work of CreateWebinar.com, Stefan Wallentowitz, Olivier Berger and Daniel Vogt. Parts of this code have already been published under MIT license and public domain. These parts are re-released in this project under the GPL-2.0 License.
FAQs
Big Blue Button Downloader that downloads a BBB lesson as MP4 video
We found that bbb-dlc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.