Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
An unofficial node.js client for the btc-e trade api including v2 public api methods(depth, fee, ticker, and trades).
node-btc-e is available as btc-e
on npm.
npm install btc-e
var BTCE = require('btc-e'),
btceTrade = new BTCE("YourApiKey", "YourSecret"),
// No need to provide keys if you're only using the public api methods.
btcePublic = new BTCE();
// Public API method call.
// Note: Could use "btceTrade" here as well.
btcePublic.ticker("ltc_btc", function(err, data) {
console.log(err, data);
});
// Trade API method call.
btceTrade.getInfo(function(err, info) {
console.log(err, info);
});
The constructor supports an optional third parameter for passing in various options to override defaults, which can either be a hash of the overrides or a nonce generation function if that is the only override required.
When passed as a hash, the following options are supported:
https://btc-e.com/tapi
https://btc-e.com/api/2/
true
by default, but can be set to false
if desired, such as if btc-e has problems with their SSL certificate again.var BTCE = require('btc-e'),
HttpsAgent = require('agentkeepalive').HttpsAgent,
btceTrade = new BTCE("YourApiKey", "YourSecret", {
agent: new HttpsAgent()
});
By default the module generates a nonce based on the current timestamp in seconds(can't use anything smaller than seconds since btc-e is capped at 4294967294 for nonces) as a means of providing a consistently increasing number, but for traders who want to possibly get in more than one trade api request per second per api key there is a way to do so by providing a nonce generation function as the nonce
option in an options hash provided as the third parameter to the constructor. Please don't abuse the service btc-e is providing though.
btc-e expects every nonce given to be greater than the previous one for each api key you have, this presents a big problem when trying to do multiple async calls with the same api key since there is no guarantee that the first api call will be processed before the second one and so on. Chaining calls synchronously(take a look at promises with q.js for help with that) or using multiple clients, each with their own API key are the only way around that problem.
var BTCE = require('btc-e'),
fs = require('fs'),
currentNonce = fs.existsSync("nonce.json") ? JSON.parse(fs.readFileSync("nonce.json")) : 0,
// Provide a nonce generation function as the third parameter if desired.
// The function must provide a number that is larger than the one before and must not
// be larger than the 32-bit unsigned integer max value of 4294967294.
btce = new BTCE("YourApiKey", "YourSecret", {
nonce: function() {
currentNonce++;
fs.writeFile("nonce.json", currentNonce);
return currentNonce;
}
});
btce.getInfo(function(err, info) {
console.log(err, info);
});
A method-by-method reference is available on the wiki.
This module is ISC licensed.
FAQs
btc-e.com API client for node.js
The npm package btc-e receives a total of 6 weekly downloads. As such, btc-e popularity was classified as not popular.
We found that btc-e demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.