
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@pvssvikas/kiteapi
Advanced tools
My Personal Javascript node client for communicating with the Kite Connect API.
Kite Connect is a set of REST-like APIs that expose many capabilities required to build a complete investment and trading platform. Execute orders in real time, manage user portfolio, stream live market data (WebSockets), and more, with the simple HTTP API collection.
Zerodha Technology (c) 2018. Licensed under the MIT License.
Install via npm
npm install kiteconnect
var KiteConnect = require("kiteconnect").KiteConnect;
var kc = new KiteConnect({
api_key: "your_api_key"
});
kc.generateSession("request_token", "api_secret")
.then(function(response) {
init();
})
.catch(function(err) {
console.log(err);
});
function init() {
// Fetch equity margins.
// You can have other api calls here.
kc.getMargins()
.then(function(response) {
// You got user's margin details.
}).catch(function(err) {
// Something went wrong.
});
}
All API calls returns a promise which you can use to call methods like .then(...)
and .catch(...)
.
kiteConnectApiCall
.then(function(v) {
// On success
})
.catch(function(e) {
// On rejected
});
var KiteTicker = require("kiteconnect").KiteTicker;
var ticker = new KiteTicker({
api_key: "api_key",
access_token: "access_token"
});
ticker.connect();
ticker.on("ticks", onTicks);
ticker.on("connect", subscribe);
function onTicks(ticks) {
console.log("Ticks", ticks);
}
function subscribe() {
var items = [738561];
ticker.subscribe(items);
ticker.setMode(ticker.modeFull, items);
}
Optionally you can enable client side auto re-connection to automatically reconnect if the connection is dropped. It is very useful at times when client side network is unreliable and patchy.
All you need to do is enable auto re-connection with preferred interval and time. For example
// Enable auto reconnect with 5 second interval and retry for maximum of 20 times.
ticker.autoReconnect(true, 20, 5)
// You can also set re-connection times to -1 for infinite re-connections
ticker.autoReconnect(true, -1, 5)
Event reconnecting
is called when auto re-connection is triggered and event callback carries two additional params reconnection interval set
and current re-connection count
.
Event noreconnect
is called when number of auto re-connections exceeds the maximum re-connection count set. For example if maximum re-connection count is set as 20
then after 20th re-connection this event will be triggered. Also note that the current process is exited when this event is triggered.
Event connect
will be triggered again when re-connection succeeds.
Here is an example demonstrating auto reconnection.
var KiteTicker = require("kiteconnect").KiteTicker;
var ticker = new KiteTicker({
api_key: "api_key",
access_token: "access_token"
});
// set autoreconnect with 10 maximum reconnections and 5 second interval
ticker.autoReconnect(true, 10, 5)
ticker.connect();
ticker.on("ticks", onTicks);
ticker.on("connect", subscribe);
ticker.on("noreconnect", function() {
console.log("noreconnect");
});
ticker.on("reconnecting", function(reconnect_interval, reconnections) {
console.log("Reconnecting: attempt - ", reconnections, " innterval - ", reconnect_interval);
});
function onTicks(ticks) {
console.log("Ticks", ticks);
}
function subscribe() {
var items = [738561];
ticker.subscribe(items);
ticker.setMode(ticker.modeFull, items);
}
In a typical web application where a new instance of views, controllers etc. are created per incoming HTTP request, you will need to initialise a new instance of Kite client per request as well. This is because each individual instance represents a single user that's authenticated, unlike an admin API where you may use one instance to manage many users.
Hence, in your web application, typically:
login_url()
request_token
from the query parametersrequest_access_token()
to obtain the access_token
along with authenticated user dataaccess_token
and initialise instances
of Kite client for subsequent API calls.FAQs
my personal version of kiteconnect
The npm package @pvssvikas/kiteapi receives a total of 0 weekly downloads. As such, @pvssvikas/kiteapi popularity was classified as not popular.
We found that @pvssvikas/kiteapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.