
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
amazon-order-scraper
Advanced tools
Scrape Amazon order history with itemized details, prices, and transactions
Scrape Amazon order history with itemized details, prices, and transactions. Supports multiple accounts via profiles.
npm install -g amazon-order-scraper
# Install Playwright browsers (required)
npx playwright install chromium
# Interactive login - opens browser for you to log in
amazon-scraper --login
# For multiple accounts, use profiles
amazon-scraper --login --profile wife
# Fetch orders from the last 30 days
amazon-scraper --days 30
# Fetch orders for a specific year
amazon-scraper --year 2024
# Fetch orders in a date range
amazon-scraper --since 2024-11-01 --until 2024-12-31
# Save to file
amazon-scraper --days 30 --output orders.json
# Use a specific profile
amazon-scraper --profile wife --days 30
# Run without visible browser (requires prior login)
amazon-scraper --profile erick --days 7 --headless --output orders.json
| Option | Description |
|---|---|
--year <year> | Fetch orders for specific year (e.g., 2024) |
--since <date> | Fetch orders since date (ISO format: 2024-01-01) |
--until <date> | Fetch orders until date (ISO format: 2024-12-31) |
--days <n> | Fetch orders from last N days |
--output <file> | Write output to file |
--stdout | Write to stdout (default) |
--include-pending | Include orders not yet charged |
--profile <name> | Use named profile (for multiple accounts) |
--login | Interactive login mode |
--headless | Run browser in headless mode |
--help | Show help message |
{
"orders": [
{
"orderId": "111-1234567-8901234",
"orderDate": "2024-11-24",
"total": "$44.91",
"subtotal": "$42.37",
"tax": "$2.54",
"shipping": "$0.00",
"items": [
{
"name": "Product Name",
"price": "$9.99",
"quantity": 1
}
],
"transactions": [
{
"date": "2024-11-24",
"amount": "$44.91",
"type": "charge",
"last4": "1234",
"description": "Visa ending in 1234 - charged $44.91"
}
]
}
]
}
| Code | Meaning |
|---|---|
| 0 | Success |
| 1 | Scraping error |
| 2 | Login required |
This package also includes an MCP (Model Context Protocol) server for use with Claude Code:
{
"mcpServers": {
"amazon-scraper": {
"command": "npx",
"args": ["amazon-order-scraper"]
}
}
}
For running on a headless server (e.g., Hetzner VM):
Install xvfb and VNC:
apt install xvfb x11vnc
Xvfb :99 -screen 0 1280x720x24 &
export DISPLAY=:99
x11vnc -display :99 -forever -nopw -listen 0.0.0.0 -rfbport 5900 &
Connect via VNC and run login:
amazon-scraper --login --profile myaccount
Set up cron job for headless scraping:
DISPLAY=:99 amazon-scraper --profile myaccount --days 7 --headless --output /data/orders.json
| Variable | Description |
|---|---|
BROWSER_DATA_DIR | Base directory for browser profiles (default: /tmp/amazon-monarch-sync) |
MIT
FAQs
Scrape Amazon order history with itemized details, prices, and transactions
We found that amazon-order-scraper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.