Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
An unofficial nodejs API wrapper for Hyundai BlueLink
npm install bluelinky
const BlueLinky = require('bluelinky');
const client = new BlueLinky({
username: 'someguy@example.com',
password: 'hunter1',
brand: 'hyundai',
region: 'US',
pin: '1234'
});
client.on('ready', async () => {
const vehicle = client.getVehicle('5NMS55555555555555');
try {
const response = await vehicle.lock();
console.log(response);
} catch (err) {
// log the error from the command invocation
}
});
client.on('error', async (err) => {
// something went wrong with login
});
Ensure you have a config.json
that matches the structure of the following, with your account details
{
"username": "email",
"password": "password",
"pin": "pin",
"brand": "kia" or "hyundai",
"vin": "vin"
}
Run an install for all the dependencies, npm install
Now you can invoke the debug.ts script with npm run debug
Checkout out the docs for more info.
Important information for login problems:
In the EU region, stamps are used to sign every API queries. These stamps have a 1 week validity. Those stamps are using a tricky algorithm and cannot be replicated by Bluelinky and have to be generated by an external solution. An http call is performed to get the existing tokens. It is possible to specify an other path using the stampFile
option. This path can be a local file prefixed by file://
or from any webserver.
By default the case is 24H, but it can but customized at will. A nice trick is to run you own stamp generator http server and querying it regularly (with low cache timeout) for fresh stamps.
The JSON file must respect this format
| Regions
Give a ⭐️ if this project helped you!
FAQs
An unofficial nodejs API wrapper for Hyundai bluelink
The npm package bluelinky receives a total of 126 weekly downloads. As such, bluelinky popularity was classified as not popular.
We found that bluelinky demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.