
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
bkash-payment-api
Advanced tools
Nodejs library to accept bkash payments on your backend application. BKASH API WRAPPER
Nodejs library to accept bkash payments on your backend application. BKASH API WRAPPER
vscodevscode30 seconds and get an error so that you can query the paymentin progressnpm
npm install bkash-payment-api
yarn
yarn add bkash-payment-api
**You need Bkash Merchant or Retails account to use this library
Select Application Platform: select all ✔
baseUrl is
https://checkout.sandbox.bka.sh/v1.2.0-betafor sandbox baseUrl ishttps://tokenized.pay.bka.sh/v1.2.0-betafor production
- Create a payment
- get the response and enter that in
Create Payment Sandbox Testalso get thepaymentIDfrom response- Execute a payment with the
paymentIDand enter the response inExecute Payment Sandbox Test- Submit and You got your Live Credentials
javascriptfile
bkash.js
const { BkashGateway } = require('bkash-payment-api');
const bkashConfig = {
baseURL: 'https://checkout.sandbox.bka.sh/v1.2.0-beta', //do not add a trailing slash
key: 'abcdxxx2369',
username: 'bkashTest',
password: 'bkashPassword1',
secret: 'bkashSup3rS3cRet',
};
const bkash = new BkashGateway(config);
module.exports = bkash;
typescriptfile
bkash.ts
import { BkashGateway IBkashConstructor } from 'bkash-payment-api';
const bkashConfig: IBkashConstructor = {
//get intellisense here
baseURL: 'https://checkout.sandbox.bka.sh/v1.2.0-beta', //do not add a trailing slash
key: 'abcdxx2369',
username: 'bkashTest',
password: 'bkashPassword1',
secret: 'bkashSup3rS3cRet',
};
const bkash = new BkashGateway(config);
export default bkash;
const paymentRequest = {
amount: 1000,
orderID: 'ORD1020069',
intent: 'sale',
callBack: 'https://example.com/bkash/callback',
};
const result = await bkash.createPayment(paymentRequest);
console.log(result);
const paymentId = createPaymentRequest.paymentID; // sample payment ID
const result = await bkash.executePayment(paymentId);
const paymentId = createPaymentRequest.paymentID; // sample payment ID
const result = await bkash.queryPayment(paymentId);
const result = await bkash.searchTransaction('TRX22347463XX');
Not Working Right Now
const refundTransactionData = {
paymentID: '22423169',
amount: '25.69', //do not add more than two decimal points
trxID: 'TRX22347463XX';
sku: 'SK256519';
}
const result = await bkash.refundTransaction(refundTransactionData);
Not Working Right Now
const result = await bkash.refundStatus('TRX22347463XX', '12437969');
issues or pull request for any issues and bugfixesproject section of the github repositoryMIT
DISCLAIMER: This software comes with absolutely no warranty and is not affiliated with the company
Bkashin any way. Use at your own risk. Author and Contributors are not responsible for any financial damages, outages etc.
Continue By Siyam Hosan Created by Shahriar Shojib
FAQs
Nodejs library to accept bkash payments on your backend application. BKASH API WRAPPER
The npm package bkash-payment-api receives a total of 2 weekly downloads. As such, bkash-payment-api popularity was classified as not popular.
We found that bkash-payment-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.