Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@cao-mei-you-ren/koishi-plugin-adapter-wechaty
Advanced tools
Koishi Wechaty 适配器
本项目是原 koishi-plugin-adapter-wechaty 的修复版,在最新的 koishi@4.15.7 可用
https://github.com/CaoMeiYouRen/koishi-plugin-adapter-wechaty#readme
前往插件市场搜索 @cao-mei-you-ren/adapter-wechaty
然后安装即可。
Tips:被提示为不安全
是正常的,具体原因可见:应当避免的情况。
简而言之就是 wechaty 这个包本身用到了基于 gyp 的包,故依赖 wechaty 的本项目也被提示 不安全
npm install @cao-mei-you-ren/koishi-plugin-adapter-wechaty
前往插件页面按照引导完成配置
注意,name
字段在启用多个插件实例的时候不可重复!
默认为 wechaty-puppet-wechat
。
详见:https://wechaty.js.org/zh/docs/specs/puppet
机器人自身 ID,用于比对是否为机器人自身的消息。
注意和微信号不同。
详见:https://wechaty.js.org/zh/docs/puppet-services/tokens
启动插件,并在 Koishi 控制台的『日志』或是 stdout 中查看二维码,扫描登录。
npm run dev
npm run build
npm run lint
npm run commit
CaoMeiYouRen
Website: https://blog.cmyr.ltd/
GitHub: @CaoMeiYouRen
欢迎 贡献、提问或提出新功能!
如有问题请查看 issues page.
贡献或提出新功能可以查看contributing guide.
可以向本项目提出问题和反馈,但不一定能得到解决。
由于本项目的核心代码都是从原项目复制的,所以很多逻辑我也没有理清楚,故仅提供基础维护,即:确保在 Wechaty
本身可用的情况下确保@cao-mei-you-ren/koishi-plugin-adapter-wechaty
可用。
由于原项目使用了 AGPL-3.0,故根据 AGPL-3.0,本项目也需要使用 AGPL-3.0 进行开源。
如果觉得这个项目有用的话请给一颗⭐️,非常感谢
Copyright © 2023 CaoMeiYouRen.
This project is AGPL-3.0 licensed.
This README was generated with ❤️ by cmyr-template-cli
FAQs
Koishi Wechaty 适配器
We found that @cao-mei-you-ren/koishi-plugin-adapter-wechaty demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.