
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
@lukeed/gtoken
Advanced tools
Node.js Google Authentication Service Account Tokens
Important: This fork will change according to my needs and will not be maintained for public use!
npm install @lukeed/gtoken
const { GoogleToken } = require('@lukeed/gtoken');
const gtoken = new GoogleToken({
email: 'my_service_account_email@developer.gserviceaccount.com',
scope: ['https://scope1', 'https://scope2'], // or space-delimited string of scopes
key: '-----BEGIN RSA PRIVATE KEY-----\nXXXXXXXXXXX...'
});
const token = await gtoken.getToken()
console.log(token);
Or with promises:
gtoken.getToken()
.then(token => {
console.log(`Token: ${token}`)
})
.catch(e => console.error);
Various options that can be set when creating initializing the
gtokenobject.
options.email or options.iss: The service account email address.options.scope: An array of scope strings or space-delimited string of scopes.options.sub: The email address of the user requesting delegated access.options.key: The raw RSA private key valueReturns the cached token or requests a new one and returns it.
await gtoken.getToken();
Various properties set on the gtoken object after call to
.getToken().
gtoken.token: The access token.gtoken.expiresAt: The expiry date as milliseconds since 1970/01/01gtoken.key: The raw key value.gtoken.rawToken: Most recent raw token data received from Google.Returns true if the token has expired, or token does not exist.
gtoken.isExpired(); // false
Revoke the token if set.
await gtoken.revokeToken();
(MIT) Copyright 2018 Google LLC
FAQs
Node.js Google Authentication Service Account Tokens
We found that @lukeed/gtoken demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.