
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
casambi-bt-revamped
Advanced tools
This is an enhanced fork of the original casambi-bt library with additional features:
This library provides a bluetooth interface to Casambi-based lights. It is not associated with Casambi.
For Home Assistant integration using this library, see casambi-bt-hass.
This library is available on PyPi:
pip install casambi-bt-revamped
Have a look at demo.py
for a small example.
This fork adds support for receiving switch button events:
from CasambiBt import Casambi
def handle_switch_event(event_data):
print(f"Switch event: Unit {event_data['unit_id']}, "
f"Button {event_data['button']}, "
f"Action: {event_data['event']}")
casa = Casambi()
# ... connect to network ...
# Register switch event handler
casa.registerSwitchEventHandler(handle_switch_event)
# Events will be received when buttons are pressed/released
MacOS does not expose the Bluetooth MAC address via their official API, if you're running this library on MacOS, it will use an undocumented IOBluetooth API to get the MAC Address. Without the real MAC address the integration with Casambi will not work. If you're running into problems fetching the MAC address on MacOS, try it on a Raspberry Pi.
If you have problems connecting to the network please check that your network is configured appropriately before creating an issue. The network I test this with uses the Evoultion firmware and is configured as follows (screenshots are for the iOS app but the Android app should look very similar):
FAQs
Enhanced Casambi Bluetooth client library with switch event support
We found that casambi-bt-revamped demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.