Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
alipay-bills
Advanced tools
一个用于自动获取支付宝账单信息的 Node.js 模块。
npm install alipay-bills
alipay-bills 只有两个方法:
const alipayBills = require('alipay-bills')
// setUser 方法只能调用一次,同时请确保你的用户名和密码是正确的,alipay-bills 没有处理密码错误的情况。
alipayBills.setUser('用户名', '密码')
alipayBills.query().then(bills => {
// bills 是一个数组,数组中每一项的结构为:
//{
// day: string - 日期,如 '2017.08.15'
// time: string - 具体时间,如 '04:10'
// name: string - 对应「我的账单高级版」的「名称」
// orderNo: string - 对应「我的账单高级版」的「商户订单号|交易号」
// target: string - 对应「我的账单高级版」的「对方」
// amount: string - 对应「我的账单高级版」的「金额|明细」
// status: string - 对应「我的账单高级版」的「状态」
//}
})
账单数据是从「我的账单高级版」中抓取的,但是偶尔登陆后会跳转到「我的账单标准版」,此时抓取到的数据是无效的。临时的解决方案是:自行登陆支付宝网页版将「我的账单」页面切换为「高级版」。
使用 Selenium 操作 PhantomJS 模拟用户登陆,进入「我的账单」页获取账单数据。
代码参考了利用『爬虫』 折衷解决 个人支付宝支付系统 ---- 获取账单信息这篇帖子。
MIT
FAQs
The npm package alipay-bills receives a total of 4 weekly downloads. As such, alipay-bills popularity was classified as not popular.
We found that alipay-bills demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.