Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
alipay-bills
Advanced tools
一个用于自动获取支付宝账单信息的 Node.js 模块。
npm install alipay-bills
alipay-bills 只有两个方法:
const alipayBills = require('alipay-bills')
alipayBills.options.debug = true // 在控制台输出日志
// alipayBills 的接口都是异步的,强烈推荐使用 async/await 语法
;(async function () {
// 请确保你的用户名和密码是正确的,否则会无限重试登录。
// 如果你已经登录过了,重新调用这个方法会先将已经登录的账号退出。
await alipayBills.setUser('用户名', '密码')
await alipayBills.query().then(bills => {
// bills 是一个数组,数组中每一项的结构为:
//{
// day: string - 日期,如 '2017.08.15'
// time: string - 具体时间,如 '04:10'
// name: string - 对应「我的账单高级版」的「名称」
// orderNo: string - 对应「我的账单高级版」的「商户订单号|交易号」
// target: string - 对应「我的账单高级版」的「对方」
// amount: string - 对应「我的账单高级版」的「金额」
// status: string - 对应「我的账单高级版」的「状态」
//}
})
}())
使用 Selenium 操作 PhantomJS 模拟用户登陆,进入「我的账单」页获取账单数据。
代码参考了利用『爬虫』 折衷解决 个人支付宝支付系统 ---- 获取账单信息这篇帖子。
MIT
FAQs
The npm package alipay-bills receives a total of 4 weekly downloads. As such, alipay-bills popularity was classified as not popular.
We found that alipay-bills demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.