Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@tinypudding/discord-firebase-async-server
Advanced tools
System for synchronizing Discord Bots with the Firebase.
This server is used to create sub-servers that will receive or send data to Firebase via a normal NodeJS server.
Example? Firebase's servers always have a small delay to load the script when the server goes without being called for a long time. You can use this server to send a response to Discord-Interactions more quickly and then send the final request to your Firebase server run the rest of the script to send the final response to the Interaction Request.
You can also use this server to access a bot monitoring panel.
Connecting a gateway bot will also allow you to send your interactions via the Discord.JS API.
You will need to create a JSON file to configure your server.
{
"firebase": {
"apiKey": "",
"databaseURL": "",
"projectId": "",
"appId": ""
},
"cookieSession": {
"keys": [
"",
""
]
},
"discord": {
"apps": {
"test": {
"client_id": "",
"public_key": "",
"waitMessage": "Loading your message..."
}
},
"auth": {
"client_id": "",
"client_secret": ""
}
},
"web": {
"slashCommandListener": {
"enabled": true,
"function": "",
"token": "",
"id": "",
"waitMessage": "Loading your message..."
},
"botChecker": true,
"memoryChecker": {
"interval": 5000,
"historyLimit": 5000
}
},
"localhost": "localhost:3000",
"domain": "",
"crypto": ""
}
These are the Firebase definitions that will be loaded by the the firebase client module. The module name is "firebase". (This is not the "firebase-admin" module!)
Insert all the settings of the cookie-session module here.
Authentication settings for your website monitoring your Discord Bots. For security reasons, it is recommended that you create an application in Discord exclusively for this function.
Choose which module features you want to activate.
Choose a page where the user will be redirected when trying to access the domain. Changing this value, you will have to log in to the website using the path "/login".
Slash Commands server client settings.
slashCommandListener.function (String) - Name of the function you are hosting within Firebase via the module path "@tinypudding/firebase-discord-interactions/functionListener/firebaseCallback/server". This function will receive the request received by the URL of slashCommandListener.
slashCommandListener.objString (Boolean) - The data shown on the console will be a string instead of an Object.
slashCommandListener.enabled (Boolean) - Activate a special URL to receive your bot's interactions via your Firebase server.
slashCommandListener.id (string) - Special security ID of your URL that will be read by the Discord Interaction API Webhook.
slashCommandListener.waitMessage (string) - This message will be displayed while the server processes the rest of the script.
slashCommandListener.token (String) - Security token of your Firebase server that is receiving the interactions.
Activate your bot's monitoring website.
Memory analyzer settings.
memoryChecker.interval - Interval time to send the application's memory usage update. Setting a null value will disable the functionality.
memoryChecker.historyLimit - Limit of memory logging. Setting a null value will disable the functionality.
Localhost domain that will be used in your server test.
Domain name of your server.
Crypto Key. Enter a value that is at least 32 characters long.
If you have activated the Slash Command Listener, your server will activate a URL to use in your Discord's Slash Command webhook. This URL will send a response to the Discord and allow your Firebase server to do the rest of the work.
The value "slashCommandListener.id" used in your config file.
The domain from the value "domain".
This is the ID of your bot that you defined in the app settings. Example: The Bot ID of the object path of "cfg.discord.apps.test" is "test".
https://{domain}/interactions/endpoint?id={ID}&bot={bot-id}
you can find a file in the path "/test/index.js". This file contains an example on how to write the code to use the module.
FAQs
System for synchronizing Discord Bots with the Firebase.
We found that @tinypudding/discord-firebase-async-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.