
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@digitalnodecom/node-red-contrib-servicetrade
Advanced tools
A custom Node-RED config node for ServiceTrade API authentication and GET method
The ServiceTrade GET Data Node is a Node-RED node that enables you to make GET requests to the ServiceTrade API. This node requires authentication through a separate Auth Config Node that manages your ServiceTrade credentials.
| Field | Description |
|---|---|
| Name | A name to identify this node in your flow |
| Auth Config | Select the Auth Config Node that contains your ServiceTrade credentials |
| URL | The base URL for the ServiceTrade API (typically https://api.servicetrade.com/api) |
| Objects | Select from a comprehensive list of ServiceTrade objects to query |
| Limit | The maximum number of records to return per request |
| Page | The page number for paginated results |
The node supports all ServiceTrade API objects, including:
https://api.servicetrade.com/apijobThis will retrieve the first 10 jobs from your ServiceTrade account.
You can override the node's configuration using message properties:
msg.url = "https://api.servicetrade.com/api";
msg.payload = {
servicetradeobject: "quote"
};
msg.limit = 20;
msg.page = 2;
return msg;
The node accepts the following inputs through the incoming message:
| Property | Type | Description |
|---|---|---|
msg.url | String | Overrides the configured URL |
msg.servicetradeobject | String | Overrides the configured ServiceTrade object |
msg.limit | Number | Overrides the configured limit |
msg.page | Number | Overrides the configured page |
The node will report errors in the following situations:
This node works in conjunction with the Auth Config Node, which manages your ServiceTrade credentials. The Auth Config Node:
msg.url is providedFAQs
A custom Node-RED config node for ServiceTrade API authentication and GET method
We found that @digitalnodecom/node-red-contrib-servicetrade demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.