Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/devmedoo/mira
For full documentation, please see the Godoc page
MIRA is a Reddit Api Wrapper written in beautiful Go. This is a subproject of a bigger project MemeInvestor_bot.
It is super simple to use the bot as we also provide you with simple but fully extensive structs. We utilize the best features of Go, such as closures, channels, goroutines, garbage collection, etc.
Currently, mira
is a project that just began its life. We still have many new Reddit
endpoints to cover. We have the basic functionality implemented, like streaming comment
replies, new submissions. Comment, post, edit, reply, and delete options for our
instances.
Two quick notes: all actions should be done via Reddit
struct, I thought it would make it
simpler to work with. Secondly, all actions require the objects full thing_id
, so you have
to use GetId()
to get that id. Every struct has that method implemented and it will return
a string in the form of t[1-6]_[a-z0-9]{5}
. Refer to the following table for the classifications
of the structs.
Type Prefixes
Prefix | Type |
---|---|
t1 | Comment |
t2 | Redditor |
t3 | Submission, PostListing contents |
t4 | Message (NOT IMPLEMENTED) |
t5 | Subreddit |
t6 | Award (NOT IMPLEMENTED) |
The config file structure is very simple:
CLIENT_ID =
CLIENT_SECRET =
USERNAME =
PASSWORD =
USER_AGENT =
Mira also works with environmental variables, here is an example from docker-compose
environment:
- BOT_CLIENT_ID=hunteoahtnhnt432
- BOT_CLIENT_SECRET=ehoantehont4ht34hnt332
- BOT_USER_AGENT='u/mytestbot developed by thecsw'
- BOT_USERNAME=mytestbot
- BOT_PASSWORD=verygoodpassword
And the login will look like this:
r, err := mira.Init(mira.ReadCredsFromEnv())
Or you can always just fill in the values directly.
Note: Error checking is omitted for brevity.
Streaming new submissions is very simple! mira supports streaming comment replies, mentions, new subreddit's/redditor's comments, and new subreddit's/redditor's submissions.
// r is an instance of *mira.Reddit
// Start streaming my comment replies
c, _ := r.StreamCommentReplies()
for {
msg := <-c
r.Comment(msg.GetId()).Reply("I got your message!")
}
// Start streaming my mentions
// Start streaming my comment replies
c, _ := r.StreamMentions()
for {
msg := <-c
r.Comment(msg.GetId()).Reply("I got your mention of me!")
}
// Start streaming subreddits' submissions
c, _, _ := r.Subreddit("tifu", "wholesomememes").StreamSubmissions()
for {
post := <-c
r.Submission(post.GetId()).Save("hello there")
}
// NOTE: Second value is the stop channel. Send a true value
// to the stop channel and the goroutine will return.
// Basically, `stop <- true`
// Start streaming subreddits' comments
c, _, _ := r.Subreddit("all").StreamComments()
for {
msg := <-c
r.Comment(msg.GetId()).Reply("my reply!")
}
// Start streaming redditor's submissions
c, _, _ := r.Redditor("thecsw").StreamSubmissions()
for {
post := <-c
r.Submission(post.GetId()).Save("hello there")
}
// Start streaming redditor' comments
c, _, _ := r.Redditor("thecsw").StreamComments()
for {
msg := <-c
r.Comment(msg.GetId()).Reply("my reply!")
}
It is very easy to post a submission, comment on it, reply to a message, or edit a comment.
package main
import (
"fmt"
"github.com/thecsw/mira"
)
// Errors are omitted for brevity
func main() {
r, _ := mira.Init(mira.ReadCredsFromFile("login.conf"))
// Make a submission
post, _ := r.Subreddit("mysubreddit").Submit("mytitle", "mytext")
// Comment on our new submission
comment, _ := r.Submission(post.GetId()).Save("mycomment")
// Reply to our own comment
reply, _ := r.Comment(comment.GetId()).Reply("myreply")
// Delete the reply
r.Comment(reply.GetId()).Delete()
// Edit the first comment
newComment, _ := r.Comment(comment.GetId()).Edit("myedit")
// Show the comment's body
fmt.Println(newComment.GetBody())
}
We can also send a message to another user!
package main
import (
"github.com/thecsw/mira"
)
func main() {
r, _ := mira.Init(mira.ReadCredsFromFile("login.conf"))
r.Redditor("myuser").Compose("mytitle", "mytext")
}
You can also traverse through a number of submissions using one of our methods.
package main
import (
"fmt"
"github.com/thecsw/mira"
)
func main() {
r, _ := mira.Init(mira.ReadCredsFromFile("login.conf"))
sort := "top"
var limit int = 25
duration := "all"
subs, _ := r.Subreddit("all").Submissions(sort, duration, limit)
for _, v := range subs {
fmt.Println("Submission Title: ", v.GetTitle())
}
}
You can extract info from any reddit ID using mira. The returned value is an instance of mira.MiraInterface.
package main
import (
"fmt"
"github.com/thecsw/mira"
)
func main() {
r, _ := mira.Init(mira.ReadCredsFromFile("login.conf"))
me, _ := r.Me().Info()
comment, _ := r.Comment("t1_...").Info()
redditor, _ := r.Redditor.Info("t2_...")
submission, _ := r.Submission("t3_...").Info()
subreddit, _ := r.Subreddit("t5_...").Info()
}
Here is the interface:
type MiraInterface interface {
GetId() string
GetParentId() string
GetTitle() string
GetBody() string
GetAuthor() string
GetName() string
GetKarma() float64
GetUps() float64
GetDowns() float64
GetSubreddit() string
GetCreated() float64
GetFlair() string
GetUrl() string
IsRoot() bool
}
Surely, Reddit API is always developing and I can't implement all endpoints. It will be a bit of a bloat. Instead, you have accessto *Reddit.MiraRequest method that will let you to do any custom reddit api calls!
Here is the signature:
func (c *Reddit) MiraRequest(method string, target string, payload map[string]string) ([]byte, error) {...}
It is pretty straight-forward. The return is a slice of bytes. Parse it yourself.
Here is an example of how Reddit.Reply() uses MiraRequest:
func (c *Reddit) Reply(text string) (models.CommentWrap, error) {
ret := &models.CommentWrap{}
name, _, err := c.checkType("comment")
if err != nil {
return *ret, err
}
target := RedditOauth + "/api/comment"
ans, err := c.MiraRequest("POST", target, map[string]string{
"text": text,
"thing_id": name,
"api_type": "json",
})
json.Unmarshal(ans, ret)
return *ret, err
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.