
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@guidojw/bloxy
Advanced tools
This version is currently in development and may have unforeseen and/or untested bugs. If you find any, please, open up an issue / pull request, so we can make bloxy better together
A powerful Node.JS module that lets you interact with the Roblox Web API easily, fast and reliably.
Bloxy has 5 dependencies:
Make sure you are able to install each one of these packages, as they are all vital to the functionality of this module!
To be able to use bloxy, here's what you need to know:
Installing bloxy is easy! Simply enter the following command, and you should be good to go👍
npm install bloxy --save
Installing the dependencies may take longer!
Please, before making an issue or pull request, please make sure you have done this already:
Check out below for some examples of how to use bloxy!
// In an async environment
const bloxy = require("bloxy");
const client = new bloxy.Client({
credentials: {
cookie: "cookie"
}
});
const authenticatedUser = await client.login();
console.log(`Logged in as ${authenticatedUser.id}`) // --> "Logged in as X"
const bloxy = require("bloxy");
const client = new bloxy.Client({
credentials: {
cookie: "cookie"
}
});
await client.login();
const group = await client.getGroup(3544434);
await group.updateMember(
321, // User id
123 // Role id
);
This project is licensed under the MIT License.
FAQs
A Node.JS library for interacting with the Roblox website and its API.
We found that @guidojw/bloxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.