Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Real-time hand tracking that sends joint coordinates over OSC. Written in Python, using Google MediaPipe.
Installing via pipx is recommended, because it installs in an isolated environment.
pipx install handjoints-osc
It's of course also possible to install via pip:
pip install handjoints-osc
$ handjoints-osc --help
usage: handjoints-osc [-h] [--host HOST] [--confidence CONFIDENCE] port
positional arguments: port send OSC to this port
options: -h, --help show this help message and exit --host HOST send OSC to this host (default: localhost) --confidence CONFIDENCE, -c CONFIDENCE minimum detection confidence threshold (default: 0.5) --device DEVICE, -d DEVICE video device index or path (default: 0, i.e. the default video device) --invert, -i invert colors
For example, to start the program and send joints coordinates to SuperCollider, which typically listens for OSC on port 57120:
handjoints-osc 57120
When hands are detected, SuperCollider will start receiving OSC messages with path "/handjoints-osc". To know which value corresponds to which joint, pressing "n" will display joint numbers on the tracking window.
Example using an alternative video device:
handjoints-osc -d /dev/video2 57120
/handjoints i *i* ...f
The program detects maximum 2 hands, each hand has 21 joints, and each joint 2 coordinates.
Arguments are all in a single list, starting with the number of hands, then handedness for each hand, and following with x and y coordinates for all joints of one hand, and then the joint of each other hand.
[nHands, ...handedness, ...coordsHand0, ...cordsHand1] coords: [j0x, j0y, j1x, j1y, j2x, j2y, ...]
If only one hand is detected, numHands + handedness + coords (21 * 2) gives 44 values. If two hands are detected, there are two handedness values, so 1 + 2 + 42 + 42 = 87 values.
Recommended: make a virtual environment
python -m venv .venv source .venv/bin/activate
Install requirements:
pip install -r requirements
FAQs
real-time hands tracker, sends joints coords over OSC
We found that handjoints-osc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.