
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
A Node.JS library for communicating with the Beanstream API.
Currently only supports these actions of the Transactions API:
npm install --save beanstream
var Beanstream = require("beanstream");
var beanstream = new Beanstream(options);
options object
merchant_id stringpasscode stringusername stringpassword stringversion number / string; optional, defaults to 1Credentials for authenticating with Beanstream. Provide username + password, or merchant_id + passcode. merchant_id is required regardless.
beanstream.cardPurchase(card, order, callback);
card object
order object
callback function
callback gets passed two arguments: error and data. Data contains to JSON response from Beanstream.beanstream.preAuthorization(card, order, callback);
card object
order object
callback function
callback gets passed two arguments: error and data. Data contains to JSON response from Beanstream.This creates a pre-auth charge by automatically setting card.complete to false. See completePreAuthorization for completing the pre-auth transaction.
beanstream.completePreAuthorization(transaction_id, options, callback);
transaction_id stringoptions object
amount numbercallback function
callback gets passed two arguments: error and data. Data contains to JSON response from Beanstream.This completes a pre-auth charge.
beanstream.return(transaction_id, options, callback);
transaction_id stringoptions object
amount numbercallback function
callback gets passed two arguments: error and data. Data contains to JSON response from Beanstream.This creates a return transaction.
beanstream.void(transaction_id, options, callback);
transaction_id stringoptions object
amount numbercallback function
callback gets passed two arguments: error and data. Data contains to JSON response from Beanstream.This creates a void transaction.
complete boolean; optional, defaults to truename stringnumber stringexpiry_month number / stringexpiry_year number / stringcvd stringorder_number string,amount number,comments string; optionalbilling object; optional
name "Beanstream Internet Commerce",address_line1 stringaddress_line2 string; optionalcity stringprovince stringcountry stringpostal_code stringphone_number stringemail_address stringlanguage string; optional, defaults to "eng"customer_ip: string; optionalterm_url string; optionalFollow the instructions in test/credentials_template.js, then run tests with npm test
FAQs
Node library for Beanstream
We found that beanstream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.