
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
botium-asserter-watson-toneanalyzer
Advanced tools
[](https://nodei.co/npm/botium-asserter-watson-toneanalyzer/)
This is a Botium asserter for analyzing and verifying the tone of a chatbot. This asserter uses the Watson Tone Analyzer to retrieve the sentiment of the bot response and trigger an assertion failure if given sentiments are matched (impolite, anger, ...).
You have to activate the Tone Analzer in your IBM Cloud account, the URL and the credentials are shown on the Manage view.
Configuration of the asserter is done with the args properties (see below).
Default: https://gateway.watsonplatform.net/tone-analyzer/api
URL of your Watson Tone Analyzer instance
Depending on your IBM Cloud account, you have either API Key credentials or Username/Password credentials.
The credentials are different than the credentials your are using for logging into the IBM Cloud console
Default: 2017-09-21
Default: toneChat
Either toneChat or tone
The Watson Tone Analyzer supports two different tone analyzer modes, one for general tone analysis, one for customer engagement tone analysis, see here.
Default: en
Content language. For list of supported languages, see here.
Default: ['impolite', 'frustrated', 'sad']
JSON Array of tones. If any of these tones is identified with high likelihood (see WATSONTA_SCORE_TRIGGER) in the bot response, the test case will fail.
Depending on the WATSONTA_ENDPOINT configured, there are different tones available - see the tone_id fields in the API Docs
Default: 0.75
Minimum likelihood to trigger a tone match.
Preconfigured in Botium Box with TONEANALYZER reference code. You have to add your Watson credentials.
See https://botium.atlassian.net/wiki/spaces/BOTIUM/pages/2293815/Botium+Asserters
Install asserter NPM package:
npm install --save botium-asserter-watson-toneanalyzer
Add to botium.json - in this case, it is added as a global asserter running it on all responses. This is the suggested use case.
{
"botium": {
"Capabilities": {
...
"ASSERTERS": [
{
"ref": "TONEANALYZER",
"src": "botium-asserter-watson-toneanalyzer",
"global": true,
"args": {
"WATSONTA_URL": "...",
"WATSONTA_APIKEY": "..."
}
}
]
}
}
}
If asserter is configured as global, assertions are done on all bot responses.
Otherwise, you can trigger the assertions by adding it to your convo file:
#me
hey how are you
#bot
TONEANALYZER
FAQs
[](https://nodei.co/npm/botium-asserter-watson-toneanalyzer/)
The npm package botium-asserter-watson-toneanalyzer receives a total of 0 weekly downloads. As such, botium-asserter-watson-toneanalyzer popularity was classified as not popular.
We found that botium-asserter-watson-toneanalyzer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.