
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@ibanforge/sdk
Advanced tools
Official SDK for the IBANforge API — IBAN validation, BIC/SWIFT lookup, compliance checks
Official TypeScript SDK for the IBANforge API — IBAN validation, BIC/SWIFT lookup, SEPA compliance checks, and risk scoring.
fetch)npm install @ibanforge/sdk
import { IBANforge } from '@ibanforge/sdk';
// With a free API key (200 req/month)
const client = new IBANforge('ifk_your_api_key');
// Without a key (x402 micropayment per request)
const client = new IBANforge();
const result = await client.validate('CH9300762011623852957');
console.log(result.valid); // true
console.log(result.country); // { code: 'CH', name: 'Switzerland' }
console.log(result.sepa?.member); // true
console.log(result.bic?.code); // 'UBSWCHZH' (if BIC is found)
const batch = await client.validateBatch([
'CH9300762011623852957',
'DE89370400440532013000',
'FR7630006000011234567890189',
]);
console.log(batch.summary); // { total: 3, valid: 3, invalid: 0 }
batch.results.forEach(r => console.log(r.iban, r.valid));
const bic = await client.lookupBIC('UBSWCHZH');
console.log(bic.institution); // 'UBS AG'
console.log(bic.city); // 'ZURICH'
console.log(bic.found); // true
console.log(bic.lei); // LEI code if available
const check = await client.compliance('DE89370400440532013000');
console.log(check.compliance.risk_level); // 'low'
console.log(check.compliance.risk_score); // 12
console.log(check.compliance.sanctions.country_sanctioned); // false
console.log(check.compliance.reachability.sepa_instant); // true
console.log(check.compliance.vop.status); // 'active'
const usage = await client.usage();
console.log(usage.used); // 42
console.log(usage.remaining); // 158
console.log(usage.limit); // 200
console.log(usage.month); // '2026-04'
All API errors throw an IBANforgeError with status, code, and message:
import { IBANforge, IBANforgeError } from '@ibanforge/sdk';
const client = new IBANforge('ifk_your_api_key');
try {
const result = await client.validate('INVALID_IBAN');
} catch (err) {
if (err instanceof IBANforgeError) {
console.error(err.message); // Human-readable message
console.error(err.status); // HTTP status code (e.g. 400, 402, 429)
console.error(err.code); // Machine-readable code (e.g. 'quota_exceeded')
}
}
Common error codes:
| Code | Status | Meaning |
|---|---|---|
quota_exceeded | 429 | Monthly free tier limit reached (200 req/month) |
invalid_key | 401 | API key not found or inactive |
payment_required | 402 | No API key and no x402 payment provided |
invalid_input | 400 | Missing or malformed request body |
For testing against a local instance:
const client = new IBANforge('ifk_your_key', {
baseUrl: 'http://localhost:3000',
});
Get 200 free requests/month at ibanforge.com.
For higher volumes, pay per request using x402 USDC micropayments — no subscription required.
MIT
FAQs
Official TypeScript SDK for the IBANforge API — IBAN validation, BIC/SWIFT lookup, Swiss BC-Nummer, SEPA/VoP and compliance risk scoring, with API-key auth, typed errors and x402 support.
The npm package @ibanforge/sdk receives a total of 14 weekly downloads. As such, @ibanforge/sdk popularity was classified as not popular.
We found that @ibanforge/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.