
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@profullstack/payment-gateway
Advanced tools
Unified payment gateway abstraction for multiple payment providers
Unified payment gateway abstraction for multiple payment providers.
npm install @profullstack/payment-gateway
import {
createPaymentGateway,
createStripeProvider
} from '@profullstack/payment-gateway';
// Create a Stripe provider
const stripeProvider = createStripeProvider({
secretKey: process.env.STRIPE_SECRET_KEY,
publishableKey: process.env.STRIPE_PUBLISHABLE_KEY,
webhookSecret: process.env.STRIPE_WEBHOOK_SECRET
});
// Create a payment gateway with Stripe provider
const gateway = createPaymentGateway({
providers: {
stripe: stripeProvider
},
defaultProvider: 'stripe'
});
// Create a checkout session
const session = await gateway.createCheckoutSession({
customerEmail: 'customer@example.com',
priceId: 'price_1234567890',
successUrl: 'https://example.com/success',
cancelUrl: 'https://example.com/cancel',
mode: 'subscription'
});
console.log('Checkout URL:', session.url);
import {
createPaymentGateway,
createStripeProvider,
createPayPalProvider,
createCryptoProvider,
createMockProvider
} from '@profullstack/payment-gateway';
// Create providers
const stripeProvider = createStripeProvider({
secretKey: process.env.STRIPE_SECRET_KEY,
publishableKey: process.env.STRIPE_PUBLISHABLE_KEY,
webhookSecret: process.env.STRIPE_WEBHOOK_SECRET
});
const cryptoProvider = createCryptoProvider({
wallets: {
btc: process.env.BTC_WALLET_ADDRESS,
eth: process.env.ETH_WALLET_ADDRESS,
sol: process.env.SOL_WALLET_ADDRESS,
usdc: process.env.USDC_WALLET_ADDRESS
},
exchangeRateProviders: {
btc: async () => 50000, // Example rate
eth: async () => 3000,
sol: async () => 100,
usdc: async () => 1
}
});
// Create a payment gateway with multiple providers
const gateway = createPaymentGateway({
providers: {
stripe: stripeProvider,
crypto: cryptoProvider
},
defaultProvider: 'stripe',
debug: true
});
// Create a checkout session with the default provider
const session = await gateway.createCheckoutSession({
customerEmail: 'customer@example.com',
priceId: 'price_1234567890',
successUrl: 'https://example.com/success',
cancelUrl: 'https://example.com/cancel',
metadata: {
orderId: '12345'
},
mode: 'subscription' // or 'payment' for one-time payments
});
// Create a checkout session with a specific provider
const cryptoSession = await gateway.createCheckoutSession({
provider: 'crypto',
customerEmail: 'customer@example.com',
amount: 100, // $100 USD
coin: 'btc',
successUrl: 'https://example.com/success',
cancelUrl: 'https://example.com/cancel'
});
console.log('Checkout URL:', session.url);
// Create a subscription
const subscription = await gateway.createSubscription({
customerId: 'cus_1234567890',
priceId: 'price_1234567890',
metadata: {
plan: 'premium'
}
});
console.log('Subscription created:', subscription.id);
// Get a subscription by ID
const subscription = await gateway.getSubscription({
subscriptionId: 'sub_1234567890'
});
// Get a subscription for a customer
const customerSubscription = await gateway.getSubscription({
customerId: 'cus_1234567890'
});
console.log('Subscription status:', subscription.status);
// Cancel a subscription immediately
const result = await gateway.cancelSubscription({
subscriptionId: 'sub_1234567890'
});
// Cancel a subscription at the end of the billing period
const result = await gateway.cancelSubscription({
subscriptionId: 'sub_1234567890',
atPeriodEnd: true
});
console.log('Subscription canceled:', result.success);
// Handle a webhook event
app.post('/webhook/stripe', async (req, res) => {
try {
const result = await gateway.handleWebhook({
provider: 'stripe',
body: req.body,
headers: req.headers
});
console.log('Webhook processed:', result.event);
res.status(200).send('Webhook received');
} catch (error) {
console.error('Webhook error:', error);
res.status(400).send('Webhook error');
}
});
// Listen for webhook events
gateway.on('webhook.checkout.completed', (data) => {
console.log('Checkout completed:', data);
// Fulfill order, send confirmation email, etc.
});
gateway.on('webhook.subscription.created', (data) => {
console.log('Subscription created:', data);
// Update user permissions, etc.
});
gateway.on('webhook.subscription.deleted', (data) => {
console.log('Subscription canceled:', data);
// Update user permissions, etc.
});
// Create a customer
const customer = await gateway.getProvider('stripe').createCustomer({
email: 'customer@example.com',
name: 'John Doe',
metadata: {
source: 'website'
}
});
// Get a customer
const customer = await gateway.getProvider('stripe').getCustomer({
customerId: 'cus_1234567890'
});
// Get a customer by email
const customer = await gateway.getProvider('stripe').getCustomer({
email: 'customer@example.com'
});
// Update a customer
const customer = await gateway.getProvider('stripe').updateCustomer({
customerId: 'cus_1234567890',
name: 'Jane Doe',
metadata: {
updated: 'true'
}
});
// Create a product
const product = await gateway.getProvider('stripe').createProduct({
name: 'Premium Plan',
description: 'Access to all premium features',
metadata: {
features: 'all'
}
});
// Create a price
const price = await gateway.getProvider('stripe').createPrice({
productId: product.id,
unitAmount: 1000, // $10.00
currency: 'usd',
interval: 'month',
intervalCount: 1,
metadata: {
plan: 'monthly'
}
});
import { createStripeProvider } from '@profullstack/payment-gateway';
const stripeProvider = createStripeProvider({
secretKey: process.env.STRIPE_SECRET_KEY,
publishableKey: process.env.STRIPE_PUBLISHABLE_KEY,
webhookSecret: process.env.STRIPE_WEBHOOK_SECRET,
debug: true
});
// Get Stripe publishable key
const publishableKey = stripeProvider.getPublishableKey();
// Create a payment method
const paymentMethod = await stripeProvider.createPaymentMethod({
customerId: 'cus_1234567890',
type: 'card',
data: {
number: '4242424242424242',
exp_month: 12,
exp_year: 2025,
cvc: '123'
}
});
// Get payment methods
const paymentMethods = await stripeProvider.getPaymentMethods({
customerId: 'cus_1234567890',
type: 'card'
});
import { createCryptoProvider } from '@profullstack/payment-gateway';
const cryptoProvider = createCryptoProvider({
wallets: {
btc: 'bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh',
eth: '0x71C7656EC7ab88b098defB751B7401B5f6d8976F',
sol: '5YNmS1R9nNSCDzb5a7mMJ1dwK9uHeAAF4CmPEwKgVWr8',
usdc: '0x71C7656EC7ab88b098defB751B7401B5f6d8976F'
},
exchangeRateProviders: {
btc: async () => {
const response = await fetch('https://api.coinbase.com/v2/exchange-rates?currency=BTC');
const data = await response.json();
return parseFloat(data.data.rates.USD);
},
eth: async () => {
const response = await fetch('https://api.coinbase.com/v2/exchange-rates?currency=ETH');
const data = await response.json();
return parseFloat(data.data.rates.USD);
},
sol: async () => {
const response = await fetch('https://api.coinbase.com/v2/exchange-rates?currency=SOL');
const data = await response.json();
return parseFloat(data.data.rates.USD);
},
usdc: async () => 1 // USDC is pegged to USD
},
verificationCallback: async (payment) => {
// Verify payment on blockchain
// Return true if payment is verified
return true;
},
debug: true
});
// Verify a payment
const verified = await cryptoProvider.verifyPayment({
subscriptionId: 'crypto_sub_1234567890',
transactionId: '0x1234567890abcdef'
});
import { createMockProvider } from '@profullstack/payment-gateway';
const mockProvider = createMockProvider({
simulateErrors: false,
errorRate: 0.1,
delay: 500,
debug: true
});
// Use for testing
const session = await mockProvider.createCheckoutSession({
customerEmail: 'test@example.com',
amount: 1000,
currency: 'usd'
});
You can create custom providers by implementing the provider interface:
function createCustomProvider(options = {}) {
// Implement required methods
return {
createCheckoutSession: async (options) => { /* ... */ },
createSubscription: async (options) => { /* ... */ },
getSubscription: async (options) => { /* ... */ },
cancelSubscription: async (options) => { /* ... */ },
handleWebhook: async (options) => { /* ... */ }
};
}
// Register the custom provider
const gateway = createPaymentGateway({
providers: {
custom: createCustomProvider()
},
defaultProvider: 'custom'
});
See the examples directory for complete usage examples.
MIT
FAQs
Unified payment gateway abstraction for multiple payment providers
We found that @profullstack/payment-gateway demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.