Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@begin/api
Advanced tools
Node client for api.begin.com
Obtain an token
by creating a client at https://api.begin.com.
npm i @begin/api
import { App } from '@begin/api'
const { App } = require('@begin/api')
// list apps
let { apps } = await App.list()
// find an app by id
let app = await App.find({ access_token, appID })
// create a new app
let app = await App.create({ access_token, zip })
// create a new app using @begin/chunker
let app = await App.create({ access_token, chunk, zip })
// read app logs
let logs = await app.logs()
// read build logs
let logs = await app.builds()
// deploy a new version of the app
await app.deploy({ zip })
// deploy a new version of the app using @begin/chunker
await app.deploy({ chunk, zip })
// destroy an app
await app.destroy()
// get the app env
let { env } = await app.env.get()
// write an env var
await app.env.set({ key: "HENLO", value: "world" })
// remove an env var
await app.env.destroy({ key: "HENLO" })
// get the app env
let { files } = await app.static.get()
// write a file
let body = Buffer.from('console.log("hi")').toString('base64')
await app.static.set({ name: '/file.js', body })
// remove the file
await app.static.destroy({ name: '/file.js' })
Create .env
with the following values:
BEGIN_CLIENT_ID=xxx
ACCESS_TOKEN=xxx
FAQs
Node.js client for api.begin.com
The npm package @begin/api receives a total of 31 weekly downloads. As such, @begin/api popularity was classified as not popular.
We found that @begin/api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.