Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
discord-prevname
Advanced tools
const Mxtorie = require('discord-prevname')
const api = new Mxtorie("authorization key")
api.getBalance().then(data => {
console.log(data) // balance_data
})
api.fetchNames("user Id", false).then(data => { // false will remove all duplicated
console.log(data) // name_data
})
{
code: number, // 200 = succes
name: string, // a name not important
message: string, // a message not important
data: float, // the balance
}
{
code: number, // 200 = succes
name: string, // a name not important
message: string, // a message saying the data length
data: prevnames[]
}
{
old: string, // the old username + tag
new: string, // the new username + tag
date: string|Date, // the date of the changement
dateFormat: boolean,
}
"18/5/2022 8:53:31" // dateFormat = false
"<t:1535563350>" // dateFormat = true
200 = succes
403 = forbidden
400 = not synchronized
406 = invalid authorization
429 = rate limit (will ban your authorization key)
405 = banned authorization
407 = user Id invalid
You can do max 12 request all 10 seconds without being banned.
Succes prevnames request cost 0.05€
.
You can add credit in discord.
You can use the command /create
to create your first key and get 2€
on it.
FAQs
A discord prevname api by Mxtorie
The npm package discord-prevname receives a total of 0 weekly downloads. As such, discord-prevname popularity was classified as not popular.
We found that discord-prevname demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.