
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
cyberbot-core
Advanced tools
CyberBot 是一个基于 node-napcat-ts 开发的高性能 QQ 机器人框架,提供了丰富的插件系统和易用的 API 接口。
.oooooo. .o8 oooooooooo. .
d8P' `Y8b "888 `888' `Y8b .o8
888 oooo ooo 888oooo. .ooooo. oooo d8b 888 888 .ooooo. .o888oo
888 `88. .8' d88' `88b d88' `88b `888""8P 888oooo888' d88' `88b 888
888 `88..8' 888 888 888ooo888 888 888 `88b 888 888 888
`88b ooo `888' 888 888 888 .o 888 888 .88P 888 888 888 .
`Y8bood8P' .8' `Y8bod8P' `Y8bod8P' d888b o888bood8P' `Y8bod8P' "888"
.o..P'
`Y8P'
确保你的系统已安装 Node.js (推荐 v16 或更高版本)
下载项目并安装依赖:
npx cyberbot-core
根据交互步骤进行即可
config.json:{
"baseUrl": "ws://localhost:3001", // napcat WebSocket地址
"accessToken": "123456", // napcat token
"throwPromise": false, // 是否抛出异常
"reconnection": { // 重连配置
"enable": true, // 是否启用重连
"attempts": 10, // 重连次数
"delay": 5000, // 重连延迟
"debug": false // 是否打印重连日志
},
"bot": 12345678, // 机器人QQ号
"master": [ // 主人QQ号
1000001
],
"admins": [1000001], // 管理员QQ号列表
"plugins": { // 插件列表
"system": [ // 系统插件
"cmds"
],
"user": [ // 用户插件
"demo"
]
},
"logger": { // 日志配置
"level": "info", // 日志级别
"maxSize": "10m", // 单个日志文件最大大小
"maxDays": 7 // 单个日志文件保存天数
}
}
npm start
https://github.com/RicardaY/cyberbot-plugin.git
plugins 目录下创建新的插件目录index.ts 文件,使用以下模板:import { definePlugin, CyberPluginContext } from 'cyberbot-core';
export default definePlugin({
name: '插件名称',
version: '1.0.0',
description: '插件描述',
setup(ctx: CyberPluginContext) {
// 注册消息处理器
ctx.handle('message', async (e) => {
if (e.raw_message === '你好') {
await e.reply('世界,你好!');
}
});
// 注册定时任务
ctx.cron('0 * * * *', () => {
console.log('每小时执行一次');
});
}
});
ctx.sendPrivateMessage(): 发送私聊消息ctx.sendGroupMessage(): 发送群消息ctx.handle(): 注册事件处理器ctx.cron(): 注册定时任务ctx.isMaster(): 检查是否为主人ctx.isAdmin(): 检查是否为管理员ctx.plugin.onPlugin('插件名')ctx.plugin.offPlugin('插件名')ctx.plugin.reloadPlugin('插件名')ctx.plugin.getPlugins()日志文件保存在 log 目录下,按日期自动分割。
欢迎提交 Issue 和 Pull Request!
MIT License
@星火
FAQs
cyberbot, 基于napcat-ts, nodejs,轻量qq机器人框架。
We found that cyberbot-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.