
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
2broke2wait
Advanced tools
This project is made to skip the queue of 2b2t.
Heavy work in progress.
There are multiple ways to install this version of 2Broke2Wait
Everything to configure is available under options.yml.
Simply edit that, the names are self-evident.
There are also hardcoded options deeper within the files, I will soon update those to be read from the configuration file.
Currently supports CLI, a discord bot for commands, and discord webhooks for info.
CLI:
- "help" lists a command list.
Discord:
- commands are slash commands, see full list there.
Webhooks:
- Webhooks do not have commands, they only provide info.
External plugins are now supported! Feel free to develop your own plugins and insert them into ./plugins.
Plugin templates are available here. There is also an example already in the plugins folder!
1. Predict Queue time.
- Currently iffy, but more accurate than 2b2t's standard prediction
2. Log data appropiately.
- Interface is rough, will update when more people start using it
1. Joining too quickly causes the bot to disconnect.
This is an issue caused by mcproxy, not this project.
FAQs
2b2t queue skipper
The npm package 2broke2wait receives a total of 4 weekly downloads. As such, 2broke2wait popularity was classified as not popular.
We found that 2broke2wait demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.