Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
![Gitter](https://badges.gitter.im/Join Chat.svg)
Bideo is a super simple library to download videos from Youtube and transcode them into mp3.
Install sabisu is extremely easy, but before you get started, you need to install one dependency:
$ brew install ffmpeg
You can download the package in here https://www.ffmpeg.org/download.html#build-linux
FFmpeg is the leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards committee, the community or a corporation.
After having everything nice and running, you can just install the gem:
$ gem install bideo
or add it to your Gemfile
gem 'bideo'
The gem will help you download music or video files really easy, for example to download a video from youtube:
movie = Bideo::Video.new("https://www.youtube.com/watch?v=z8AQQrbVTfQ")
movie.download("/Users/<yourusername>/Desktop")
That's it, but wait there is more, if you want to transcode the video to an mp3 format for example, just call the transcode
method:
movie.transcode
For videos you can add a playlist from youtube and it will download all the videos from the playlist. Same goes for the transcoding.
The file will be transcoded on the same directory you downloaded the videos previously.
music = Bideo::Music("http://a_url_for_music")
music.download("/Users/<yourusername>/Desktop")
And that is it.
Please submit all pull requests against a separate branch. Please follow the standard for naming the variables, mixins, etc.
In case you are wondering what to attack, we hnow have a milestone with the version to work, some fixes and refactors. Feel free to start one.
Thanks!
Code released under the MIT license.
FAQs
Unknown package
We found that bideo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.