
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@upflowhq/pennylane-client
Advanced tools
A TypeScript client for the Pennylane accounting API V2, automatically generated from the OpenAPI specification.
npm install @upflowhq/pennylane-client
import { OpenAPI, PennylaneService } from 'pennylane-api-client';
// Configure the base URL and authentication
OpenAPI.BASE = 'https://api.pennylane.com/v2';
OpenAPI.TOKEN = 'your-api-token';
// Use the client
async function getCompanies() {
try {
const companies = await PennylaneService.getCompanies();
console.log(companies);
} catch (error) {
console.error('Error fetching companies:', error);
}
}
getCompanies();
The client provides access to all Pennylane API endpoints, organized into services:
Each service contains methods that correspond to API endpoints, with full TypeScript typing and documentation.
This client is automatically generated from the Pennylane OpenAPI specification. The generation process is automated via GitHub Actions and runs weekly to ensure the client stays up-to-date with the latest API changes.
To generate the client locally:
npm install
npm run fetch-spec
npm run generate
npm run build
pennylane-client/
├── .github/workflows/ # GitHub Actions workflows
├── scripts/ # TypeScript build scripts
├── src/ # Generated client source code
├── package.json # Project configuration
├── tsconfig.json # TypeScript configuration
└── README.md # This file
FAQs
TypeScript client for Pennylane accounting API V2
The npm package @upflowhq/pennylane-client receives a total of 0 weekly downloads. As such, @upflowhq/pennylane-client popularity was classified as not popular.
We found that @upflowhq/pennylane-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.