Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@socktrader/binance-local-exchange
Advanced tools
You can interact with BLE as if you would be trading with the real Binance API without taking the risk of making an actual trade. All orders calls will be saved in memory (as long as the server is running) and will be internally matched once the price on Binance hits the expected target. In case of a MARKET order the order will be settled at the current market price on Binance.
Once the order is settled an ExecutionReport is emitted according to the interface of the Binance API.
Note that BLE is not 100% local, some endpoints are (always) proxied to Binance.
For example kline
events will always be proxied to Binance so that BLE can correctly match the orders internally.
npx @socktrader/binance-local-exchange
http://localhost:8000
Still not working? Please open a bug report
The following configuration options can be configured either by argument or by environment variable.
Option | Env var | Description |
---|---|---|
-V, --version | output the version number | |
-p, --port | PORT | port number (default: 8000) |
-lt, --local-time | LOCAL_TIME | local time (default: true) |
-lei, --local-exchange-info | LOCAL_EXCHANGE_INFO | local exchange info (default: true) |
-fm, --fee-maker | FEES_MAKER | maker fee (default: 0.001) |
-ft, --fee-taker | FEES_TAKER | taker fee (default: 0.001) |
--I-KNOW-WHAT-I-AM-DOING | I_KNOW_WHAT_I_AM_DOING | removes all security warnings |
-h, --help | display help for command |
For example: export PORT=8001 && npx @socktrader/binance-local-exchange
or npx @socktrader/binance-local-exchange -p 8001
Method | Path | Implemented |
---|---|---|
GET | /api/v3/exchangeInfo | ✅ |
POST | /api/v3/order | ✅ |
GET | /api/v3/time | ✅ |
POST | /api/v3/userDataStream | ✅ |
Stream | Implemented |
---|---|
kline | ✅ |
userDataStream | ✅ |
Can be used to debug or get more information about the internal state of the server
Method | Path | Implemented | Body / Query | Info |
---|---|---|---|---|
GET | /server/debug | ✅ | Returns the state of the internal stores | |
GET | /server/config | ✅ | Returns the configuration that is used by the server | |
POST | /server/match | ✅ | { symbol: string, price: number } | Tries to match open orders. |
git clone https://github.com/SockTrader/Binance-local-exchange
cd Binance-local-exchange && npm install
npm run start
or in watch mode npm run watch
Use at your own risk. Neither SockTrader nor any project contributor can be held responsible for any potential losses.
FAQs
Binance local exchange
The npm package @socktrader/binance-local-exchange receives a total of 0 weekly downloads. As such, @socktrader/binance-local-exchange popularity was classified as not popular.
We found that @socktrader/binance-local-exchange demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.