
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github.com/yoak3n/EdgeGPT-http
just a practice work for self-entertainment.
git clone https://github.com/Yoak3n/EdgeGPT-http.git
or
Find the configuration file config.example.yaml
and rename it as config.yaml
, then modify the configuration inside.
go run .\main.go
url/chat
with a json data like the following:{
"name": "test",
"style": "bing-c",
"question": "hello bing"
}
One name
means one conversation
Then the client will get a json response:
{
"status": "success",
"style": "bing-c",
"message": "bing's answer",
"count": {
"currentNum":1,
"maxNum":20
}
}
Must installed Docker
docker pull yoaken/edgegpt-http:latest
2.Run the image:
docker run -v 'your absolute path of config.yml:/app/config.yml' -v'your absolute path of cookies.json:/app/cookies.json' -p "8080:8080" yoaken/edgegpt-http:latest
Must installed Docker
and docker-compose
docker-compose.yml
to the dir path as you likeconfig.yml
and cookies.json
in the path the same to the abovedocker-compose up -d
reset
or moregin
already supported)At the very beginning I use the Python lib EdgeGPT in my bing-qqbot,it's too complicated to start.So I planed to convert it to golang at some point,however thank billikeu that his repository Go-EdgeGPT really helped me(btw my plan is also named go-EdgeGPT
)XD
For the convenience of development, it is temporarily included as part of this project, and may be submitted as a PR in the future
And the idea came from the http service of chatgpt-mirai-qq-bot
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.