Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@socktrader/binance-local-exchange
Advanced tools
You can interact with BLE as if you would be trading with the real Binance API without taking the risk of making an actual trade. All orders calls will be saved in memory (as long as the server is running) and will be internally matched once the price on Binance hits the expected target. In case of a MARKET order the order will be settled at the current market price on Binance.
Once the order is settled an ExecutionReport is emitted according to the interface of the Binance API.
Note that BLE is not 100% local, some endpoints are (always) proxied to Binance.
For example kline
events will always be proxied to Binance so that BLE can correctly match the orders internally.
git clone https://github.com/SockTrader/Binance-local-exchange
cd Binance-local-exchange && npm install
npm run start
localhost:8000
(instead of https://api.binance.com
) in your project to make API callsMethod | Path | Implemented |
---|---|---|
GET | /api/v3/exchangeInfo | ✅ |
POST | /api/v3/order | ✅ |
GET | /api/v3/time | ✅ |
POST | /api/v3/userDataStream | ✅ |
Stream | Implemented |
---|---|
kline | ✅ |
userDataStream | ✅ |
Can be used to debug or get more information about the internal state of the server
Method | Path | Implemented | Body / Query | Info |
---|---|---|---|---|
GET | /server/debug | ✅ | Returns the state of the internal stores | |
GET | /server/config | ✅ | Returns the configuration that is used by the server | |
POST | /server/match | ✅ | { symbol: string, price: number } | Tries to match open orders. |
Use at your own risk. Neither SockTrader nor any project contributor can be held responsible for any potential losses.
FAQs
Binance local exchange
The npm package @socktrader/binance-local-exchange receives a total of 0 weekly downloads. As such, @socktrader/binance-local-exchange popularity was classified as not popular.
We found that @socktrader/binance-local-exchange demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.