
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@neuroo_fe/wechat-reply
Advanced tools
微信关键字自动回复。
npm install @neuroo_fe/wechat-reply -S
const app = require('express')()
const wechat = require('wechat')
const Reply = require('@neuroo_fe/wechat-reply')
const options = {
rules: [
{
keywords: ['包含', '^匹配开头', '匹配结尾$', '^全匹配$', '模糊.*匹配。?'],
reply: {
type: 'text',
content: '回复内容1'
}
}
],
getAccessToken (callback) {
callback(access_token)
},
onError (err) {
console.error(err)
}
}
const reply = new Reply(options)
app.post('/wechat', wechat(config).middlewarify(), reply.middlewarify())
名称 | 类型 | 必填 | 描述 |
---|---|---|---|
appId | String | 是 | 微信公众号appId |
encodingAESKey | String | 是 | 微信公众号encodingAESKey |
token | String | 是 | 微信公众号token |
rules | Array | 否 | 规则数组 |
getAccessToken | Function | 是 | 获取微信access_token函数 |
onError | Function | 否 | 错误处理函数 |
名称 | 类型 | 必填 | 描述 |
---|---|---|---|
keywords | Array | 是 | 字符串数组。用于生成RegExp 对象,因此内容需符合RegExp 规则。 |
reply | Object | 是 | 回复内容 |
seq | Number | 否 | 规则优先级。值越大越靠前。 |
name | String | 否 | 规则名称 |
名称 | 类型 | 必填 | 描述 |
---|---|---|---|
type | String | 是 | 回复内容的格式。支持text 、image 。 |
content | String | 是 | 回复的内容。 |
导出中间件函数。
app.post('/wechat', reply.middlewarify())
updateRules(rules)
更新规则。传入新的规则列表会完全覆盖旧的规则。
const Reply = require('@neuroo_fe/wechat-reply')
const reply = new Reply()
reply.updateRules([
{
name: '新规则',
...
}
])
FAQs
We found that @neuroo_fe/wechat-reply demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.