
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
caeb-bscscan
Advanced tools
BscScan is a Block Explorer and Analytics Platform for Binance Smart Chain and provides APIs that returns informations about accounts, token, contracts and a lot of other analytics.
There's already a node package bsc-scan using axios to request BscScan API infos, but the problem is that the API is behind a cloudfare DDoS protection and a captcha is asked sometimes 🥺
Why cz_binance ? It's an API and apiKey IP rate limit should normally do the job no 🥴 ?
No matter, so instead of using axios, this package use Puppeteer Extra with Stealth and Recaptcha plugins to bypass that ridiculous API limitations...
And it works really well 👻
yarn add caeb-bscscan
# - or -
npm i caeb-bscscan
// Import the lib
import BscClient from 'caeb-bscscan';
// Create a new client
const client = new BscClient();
// Get account balance
const balance = await client.getAccountBalance('0x1Ed970C1D3F9B85bA6607d45C752E22D9b0b09f4');
BscClient options.
Create a BscScan apiKey here
// BscClient example with full options (and TOR as proxy)
const client = new BscClient({
apiUrl: 'https://api.bscscan.com/api',
apiKey: 'XXX',
headless: true,
proxy: 'http://127.0.0.1:9150'
});
npm run test:watch
You can download package and open docs/index.html
for extended informations and documentations.
If you like that project and my work, you can send me your favorite shitcoin to my BEP20 wallet address : 0x1Ed970C1D3F9B85bA6607d45C752E22D9b0b09f4
Copyright © 2021, Caeb WALLACE. Released under the MIT License.
FAQs
Bypass cloudfare api.bscscan.com DDoS verifications for your APIs.
The npm package caeb-bscscan receives a total of 19 weekly downloads. As such, caeb-bscscan popularity was classified as not popular.
We found that caeb-bscscan demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.