Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
npm install clara
$ npm install clara
$ clara set apiToken <api-token>
$ clara set username <username>
$ clara scenes:get <uuid>
Create a clara
instance with your api token and username:
// Visit https://clara.io/settings/api for your api token
var clara = require('clara')({apiToken: 'your-api-token', username: 'your-username'});
Every resource method returns a promise, or accepts an optional callback.
clara.scenes.list().then(function(scenes) {
}).catch(function(err) {
});
With callbacks:
clara.scenes.list({}, function(err, scenes) {
});
The parameters for each resource method are:
clara.scenes.update({sceneId: 'scene-id'}, './scene.json', function(err, result) {});
clara.scenes.create({}, function(err, newScene) {});
All commands are available from the command line runner as well.
$ clara --help
$ clara scenes:get --help
$ clara --apiToken <apiToken> --username <username> scenes:get <sceneId>
There are several ways to set up the configuration data, from highest to lowest priority:
clara --apiToken <apiToken> --username <username> scenes:get <sceneId>
Or with api:
var clara = require('clara')({apiToken: '...', username: '...'});
Any parameter can be passed through an environment variable, prefixed with clara_
:
clara_apiToken=api-token-here clara_username=username clara scenes:get <uuid>
A json file named .clara.json
can hold configuration data:
{
"apiToken": "api-token-here",
"username": "your-username"
}
If the configuration file .clara.json
exists in $HOME, it will be used.
You can use the clara command line to quickly set/get your configuration data. It will write
to $HOME/.clara.json
:
$ clara set apiToken your-api-token
$ clara set username your-username
$ clara scenes:get scene-uuid
Run the tests using npm:
$ npm install
$ npm tests
FAQs
Clara.io API wrapper
We found that clara demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.