Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This library is a node.js wrapper for the private and public methods exposed by the BTC Markets API. You will need to have a registered account with BTC Markets and generated API keys to access the private methods.
Please contact support@btcmarkets.net if you are having trouble opening an account or generating an API key.
npm install btc-markets
This library has bee upgraded to be written in TypeScript and use promises. If you want the old version that used to callbacks, then use v0.0.10.
Other changes are:
The first parameter to each API function is a callback function which is passed error and data objects.
The error object is an instance of VError which is an extension of the standard Error object. The three main properties are:
Do not commit your API keys into public source code repositories. These can be in code, config files or IDE config files used to run tests or processes.
If you can't avoid committing API keys into your repo then use something like git-crypt.
Most cloud providers now offer solutions for securely storing API keys. For example:
And while I'm at it, make sure you enable two-factor authentication. Your account is easy to hack without 2FA enabled. You have been warned!
If you'd like to thank me for this library, you can always donate some of your crypto trading profits to:
The following is from examples.js
//const BTCMarkets = require('btc-markets').default; // if you are using JavaScript
import BTCMarkets from 'btc-markets'; // if you are using TypeScript or Babel
// Either pass your API key and secret as the first and second parameters to examples.js. eg
// node examples.js your-api-key your-api-secret
//
// Or enter them below.
// WARNING never commit your API keys into a public repository.
const key = process.argv[2] || 'your-api-key';
const secret = process.argv[3] || 'your-api-secret';
const client = new BTCMarkets(key, secret);
// get latest prices
const tick = await client.getTick("BTC", "AUD");
// get order book
const orderBook = await client.getOrderBook("BTC", "AUD");
// get market trades since 728992317
const trades = await client.getTrades("BTC", "AUD", 728992317);
// limit buy order for of 0.001 ETH at 1000 AUD
const limitOrder = await client.createOrder("ETH", "AUD", 500 * BTCMarkets.numberConverter, 0.001 * BTCMarkets.numberConverter, 'Bid', 'Limit', "10001");
//market sell for 0.001 BTC
const marketOrder = await client.createOrder("BTC", "AUD", null, 0.001 * BTCMarkets.numberConverter, 'Ask', 'Market', null);
// cancel two limit orders with id's 1132477709 and 1133590603
const cancelledOrders = await client.cancelOrders([1132477709, 1133590603]);
const accountBalances = await client.getAccountBalances();
// get trading fee for a trading pair
const tradingFee = await client.getTradingFee("BTC", "AUD");
// get order details
const orderDetails = await client.getOrderDetail([206855175, 23988196]);
// get all trades since the start of time
const tradeHistory = await client.getTradeHistory("BTC", "AUD", undefined, null);
// get 50 orders since the start of time
const orderHistory = await client.getOrderHistory("BTC", "AUD", 50, null);
// get my open orders
const openOrders = await client.getOpenOrders('BTC', 'AUD', 10, null);
// withdrawal 0.05 ETH
const cryptoWithdrawal = await client.withdrawCrypto(0.05 * BTCMarkets.numberConverter, "0x775053A6125cB51e618Eb132f00E93d6033934AD", "ETH");
// withdrawal 0.05 ETH
const withdrawHistory = await client.withdrawHistory(null, null, null);
FAQs
BTC Markets API Client for Node.JS
We found that btc-market demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.