
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
How to use belvo-js
: https://belvo-finance.github.io/belvo-js/
If you want to check the full documentation about Belvo API: https://docs.belvo.com
Or if you want to more information about:
Install the package using npm
$ npm install belvo --save
var belvo = require("belvo").default;
var client = new belvo(
'YOUR-KEY-ID',
'YOUR-SECRET',
'https://sandbox.belvo.com'
);
client.connect()
.then(function () {
client.links.list()
.then(function (res) {
console.log(res);
})
.catch(function (error) {
console.log(error);
});
});
Or if you prefer to use ES6 and async/await
import Client from 'belvo';
const client = new Client(
'YOUR-KEY-ID',
'YOUR-SECRET',
'https://sandbox.belvo.com'
);
async function getLinks() {
try {
const links = await client.links.list();
console.log(links);
} catch (error) {
console.log(error);
}
}
After checking out the repo, run npm install
to install dependencies. Then, run npm test
to run the tests.
To release a new version:
npm version major|minor|patch
to bump a new version.master
, create a tag
matching the new version.Make sure to run npm run lint
. Otherwise the build will break.
Bug reports and pull requests are welcome on GitHub at https://github.com/belvo-finance/belvo-js. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the code of conduct.
Everyone interacting in the Belvo project's codebases, issue trackers, chat rooms and mailing lists is expected to follow the code of conduct.
FAQs
The node.js module for the Belvo API
The npm package belvo receives a total of 1,024 weekly downloads. As such, belvo popularity was classified as popular.
We found that belvo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.