
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@reacherhq/api
Advanced tools
Check if an email address exists without sending any email.
@reacherhq/api
is a thin TypeScript wrapper around the Reacher Email Verification API. Reacher is a 100% open-source SaaS, written in Rust. It's also free for personal use, and the API token in @reacherhq/api
is optional, but without it the requests will be rate-limited to 50 per month.
Install the package:
yarn add @reacherhq/api # Or npm install @reacherhq/api
There are two ways to use the library: by sending single API requests, or by using batch verification (parallel queue).
import { checkSingle } from '@reacherhq/api';
checkSingle(
{ to_email: 'someone@gmail.com' },
{
// Required.
apiToken: '<YOUR_TOKEN>',
}
).then(console.log); // Output will be the JSON described in the "JSON Output" section below.
import { batchQueue } from '@reacherhq/api';
// Create a queue for email verifications.
const q = batchQueue({
// Required.
apiToken: '<YOUR_TOKEN>',
// Optional, callback to call on each successful verification.
onSuccessSingle: (result) => {
console.log(
`Verified email ${result.input}: the result is ${result.is_reachable}.`
);
},
});
// Push some data into the queue. The email verification will start as soon as
// it's in the queue. The queue has a default concurrency of 100.
q.push({ to_email: 'someone1@gmail.com' });
q.push({ to_email: 'someone2@gmail.com' }, { to_email: 'someone3@gmail.com' });
// Perform some action when the queue is drained.
q.drain(() => {
console.log('Finished processing all items.');
});
The output will be a JSON with the below format, the fields should be self-explanatory. For someone@gmail.com
(note that it is disabled by Gmail), here's the exact output:
{
"input": "someone@gmail.com",
"is_reachable": "invalid",
"misc": {
"is_disposable": false,
"is_role_account": false
},
"mx": {
"accepts_mail": true,
"records": [
"alt3.gmail-smtp-in.l.google.com.",
"gmail-smtp-in.l.google.com.",
"alt1.gmail-smtp-in.l.google.com.",
"alt4.gmail-smtp-in.l.google.com.",
"alt2.gmail-smtp-in.l.google.com."
]
},
"smtp": {
"can_connect_smtp": true,
"has_full_inbox": false,
"is_catch_all": false,
"is_deliverable": false,
"is_disabled": true
},
"syntax": {
"domain": "gmail.com",
"is_valid_syntax": true,
"username": "someone"
}
}
You can also take a look at the OpenAPI v3 specification of this JSON object.
The source code is available under the Apache-2.0 license. See the LICENSE file for more info.
FAQs
Check if an email address exists without sending any email.
The npm package @reacherhq/api receives a total of 6 weekly downloads. As such, @reacherhq/api popularity was classified as not popular.
We found that @reacherhq/api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.