
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
com.meizu.flyme:java-captcha-sdk
Advanced tools
<properties>
<java-captcha-sdk.version>1.0.0.20190515_release</java-captcha-sdk.version>
</properties>
<dependencies>
<dependency>
<groupId>com.meizu.flyme</groupId>
<artifactId>java-captcha-sdk</artifactId>
<version>${java-captcha-sdk.version}</version>
</dependency>
</dependencies>
名称 | Code | Comment |
---|---|---|
UNKNOWN_ERROR | -1 | 未知错误 |
SUCCESS | 200 | 成功 |
INVALID_TOKEN | 401 | 非法token |
SYSTEM_ERROR | 1001 | 系统错误 |
SYSTEM_BUSY | 1001 | 服务器忙 |
PARAMETER_ERROR | 1005 | 参数错误,请参考API文档 |
INVALID_SIGN | 1006 | 签名认证失败 |
INVALID_APPLICATION_ID | 110000 | appId不合法 |
PARAM_BLANK | 110004 | 参数不能为空 |
APP_IN_BLACK_LIST | 110009 | 应用被加入黑名单 |
INVALID_APPLICATION_SECRET | 110033 | 非法的appSecret |
接口 | 说明 |
---|---|
ResultPack<CheckResult> checkToken(String captchaId, String token, String userIP) throws IOException | 服务端验证码校验 |
ResultPack<CheckResult> checkToken(String captchaId, String token, String userIP, int retries) throws IOException | 服务端验证码校验(可重试) |
参数名称 | 类型 | 必需 | 默认 | 描述 |
---|---|---|---|---|
captchaId | String | 是 | null | 验证码客户端验证回调的随机串 |
token | List | 是 | null | 验证码客户端验证回调的token |
userIP | String | 否 | 0 | 超时or异常重试次数 |
retries | int | 否 | 0 | 超时or异常重试次数 |
CheckResult
code:状态码
message:状态消息
package com.meizu.maegis.captcha.sdk.server;
import com.meizu.maegis.captcha.sdk.utils.ResultPack;
import com.meizu.maegis.captcha.sdk.vo.CheckResult;
import org.junit.Test;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
public class CaptchaServiceTest {
private static final Logger logger = LoggerFactory.getLogger(CaptchaServiceTest.class);
/**
* 平台注册应用secretKey
*/
public static final String APP_SECRET = "APP_SECRET";
/**
* 平台注册应用ID
*/
public static final String APP_ID = "APP_ID";
@Test
public void testCheckToken() throws Exception {
CaptchaService captchaService = new CaptchaService(APP_ID, APP_SECRET);
String captchaId = "captchaId";
String token = "token";
String userIP = "userIP";
ResultPack<CheckResult> resultPack = captchaService.checkToken(captchaId, token, userIP);
// 可重试接口
// int retries = 3;
// ResultPack<CheckResult> resultPack = captchaService.checkToken(captchaId, token, userIP, retries);
if (resultPack.isSucceed()) {
logger.info("resultPack success:{}", resultPack);
} else {
logger.info("resultPack fail:{}", resultPack);
}
}
}
resultPack success:RESULT:[1] code:[200] comment:[] value:[CheckResult{code='200', message=''}] error:[null]] errorCode:[null]
resultPack fail:RESULT:[-1] code:[401] comment:[非法验证码信息] value:[null] error:[java.lang.Throwable: 非法验证码信息]] errorCode:[ErrorCode{value=401, description='非法token'}]
IOException posting:Read timed out
Could not send message after 1 attempts
FAQs
meizu aegis captcha sdk.
We found that com.meizu.flyme:java-captcha-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.