
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@buun_group/interparcel-api-sdk
Advanced tools
A TypeScript-based Node.js client for interacting with the Interparcel API.
Supports quoting, shipment creation, and parcel tracking.
interparcel-api-client/
├── src/
│ ├── index.ts # Entry point exports all modules
│ ├── quote/
│ │ ├── getQuote.ts # Quote API logic (v3)
│ │ ├── types.ts # Quote request/response types
│ │ ├── index.ts # Index
│ │ └── __tests__/ # Unit tests for quotes
│ ├── shipment/
│ │ ├── createShipment.ts # Shipment creation logic (v3)
│ │ ├── types.ts # Shipment request/response types
│ │ ├── index.ts # Index
│ │ └── __tests__/ # Unit tests for shipment
│ └── tracking/
│ ├── trackShipment.ts # Tracking endpoint logic (v1)
│ ├── types.ts # Tracking request/response types
│ └── __tests__/ # Unit tests for tracking
├── dist/ # Compiled output
├── test/ # Global test setup/utils
├── .github/workflows/ci.yml # GitHub Actions CI workflow
├── .npmignore
├── .gitignore
├── tsconfig.json
├── jest.config.js
├── package.json
└── README.md
npm install @buun_group/interparcel-api-sdk
See the full usage guide: docs/getting-started.md
Optional: You can use the included
Makefile
to run all checks and commands with simplemake
commands (requires GNU Make, standard on Linux/macOS, available for Windows via WSL or MinGW). For example:
make install
— install dependenciesmake build
— build the projectmake test
— run testsmake lint
— lint codemake format
— format codemake check
— run lint, format check, build, and test in sequence
This project uses Husky to enforce code quality via Git hooks.
After installing dependencies, run the following command to enable Git hooks:
npx husky
This will set up the following hooks:
npm run lint && npm run format-check
npm test
If you skip this step, code quality checks will not run automatically before commits or pushes.
For more details, see the Husky documentation.
import {
getQuote,
trackParcel,
addShipment,
QuoteRequest,
} from '@buungroup/interparcel-api-sdk';
const apiKey = process.env.INTERPARCEL_API_KEY;
const quoteRequest: QuoteRequest = {
collection: {
city: 'Sydney',
postcode: '2000',
country: 'AU',
},
delivery: {
city: 'Melbourne',
postcode: '3000',
country: 'AU',
},
parcels: [
{
weight: 2,
length: 10,
width: 20,
height: 15,
},
],
};
const quote = await getQuote(apiKey, quoteRequest);
console.log(quote);
Set your Interparcel API key in a .env.local
file or export it in your environment:
INTERPARCEL_API_KEY=your_api_key_here
npm test
Test files are colocated in __tests__/
folders inside each module (quote, shipment, tracking).
Uses jest with axios mocking for API behavior simulation.
npm run build
Compiles TypeScript code into the dist/
directory.
This project uses Prettier for code formatting and ESLint for linting. All code must be properly formatted and linted before submitting a PR.
npm run lint
npm run format
npm run format -- --check
The CI pipeline will fail if code is not properly linted or formatted.
This project includes a GitHub Actions workflow in .github/workflows/ci.yml
that runs:
npm run lint
)npm run build
)npm test
)npm audit --omit dev
)All workflows run on PRs and pushes to main
.
Package | Purpose |
---|---|
axios | HTTP client for API requests |
typescript | Type-safe development |
jest | Testing framework |
axios-mock-adapter | Mocking axios for unit tests |
@types/node | Node.js type definitions |
ts-jest | TypeScript support for Jest |
git checkout -b feature/foo
)git commit -am 'Add foo feature'
)git push origin feature/foo
)Please lint and format TypeScript code before submitting a PR.
Created by Buun Group
Lead Developer: Sacha Roussakis-Notter
This package is an unofficial community-developed client for the Interparcel API.
We are not affiliated, associated, authorized, endorsed by, or in any way officially connected with Interparcel.
All product and company names are trademarks™ or registered® trademarks of their respective holders.
FAQs
Interparcel API SDK for Node.js
The npm package @buun_group/interparcel-api-sdk receives a total of 0 weekly downloads. As such, @buun_group/interparcel-api-sdk popularity was classified as not popular.
We found that @buun_group/interparcel-api-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.