
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
python-tuio
Advanced tools
TUIO protokoll implementation based on OSC protocol. It is implemented with the python-osc libary.
http://www.tuio.org/?specification
http://opensoundcontrol.org/spec-1_0 and https://python-osc.readthedocs.io/en/latest/
pip3 install python-tuio
from pythontuio import TuioServer
from pythontuio import Cursor
server = TuioServer()
cursor = Cursor(123) # sets session_id to 123
cursor.velocity = (0.2,0.1)
cursor.motion_acceleration = 0.1
server.cursors.append(cursor)
i = 0
while i < 10:
i+=1
cursor.position = (0.5+0.01*i,0.5)
server.send_bundle()
time.sleep(0.1)
from pythontuio import TuioClient
from pythontuio import Cursor
from pythontuio import TuioListener
from threading import Thread
class MyListener(TuioListener):
def add_tuio_cursor(self, cursor: Cursor):
print("detect a new Cursor")
(...)
client = TuioClient(("localhost",3333))
t = Thread(target=client.start)
listener = MyListener()
client.add_listener(listener)
t.start()
from pythontuio import TuioClient
from pythontuio import Cursor
from pythontuio import TuioListener
from threading import Thread
def _add_tuio_cursor(self, cursor: Cursor):
print("detect a new Cursor")
(...)
client = TuioClient(("localhost",3333))
t = Thread(target=client.start)
listener = TuioListener()
listener.add_tuio_cursor = _add_tuio_cursor
client.add_listener(listener)
t.start()
Feel free to contribute inputs. Just start a MR with your changes.
FAQs
python3 implementation of the TUIO protocol
We found that python-tuio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.