Research
wget to Wipeout: Malicious Go Modules Fetch Destructive Payload
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
By Kush Pandya - May 01, 2025
📅 You're Invited: Meet the Socket team at RSAC (April 28 – May 1).RSVP →
botmaster
Framework allowing developers to write bots that are agnostic with respect to the channel used by their users (messenger, telegram etc...)
Botmaster
Botmaster v3 is coming out.
The code on this branch is for Botmaster v3. It will be published as soon as the documentation for it is out and that the first couple of bot packages are out.
Botmaster v3 is virtually a complete rewrite of the framework. A lot of the syntax remains the same, but there are quite a few breaking changes that were necessary in order to get the framework to where we wanted it to be. It is now truly a micro-framework. With only 3 dependencies and without relying on express anymore, Botmaster v3 is the only JS bot framework that gives as much control as possible to the developer without losing its ease of use.
A migration documentation will be provided once v3 is published.
Botmaster is a lightweight chatbot framework. Its purpose is to integrate your existing chatbot into a variety of messaging channels - currently Facebook Messenger, Twitter DM and Telegram.
Documentation
Find the whole documentation for the framework on: http://botmasterai.com/
Examples
Checkout the examples folder for some examples of how to use botmaster (adding more as they come in)
License
This library is licensed under the MIT license
FAQs
Framework allowing developers to write bots that are agnostic with respect to the channel used by their users (messenger, telegram etc...)
The npm package botmaster receives a total of 186 weekly downloads. As such, botmaster popularity was classified as not popular.
We found that botmaster demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Package last updated on 28 Mar 2017
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
By Olivia Brown - Apr 30, 2025
Product
A New Overview in our Dashboard
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
By André Staltz - Apr 29, 2025