Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Make sure you have Node version >= 8.0
$ npm i -S fast2sms
var fast2sms = require('fast2sms');
var options = {API_KEY:YOUR_API_KEY};
fast2sms.init(options)
fast2sms.send({ message: 'The SMS content e.g. "This is a message from Fast2SMS"', to: TARGET_PHONE_NUMBER }).then(function (data) {
console.log('data................', data);
}).catch(function (error) {
console.log('err.................', error);
})
YOUR_API_KEY = FIND THIS API KEY INSIDE https://www.fast2sms.com/dashboard/dev-api
TARGET_PHONE_NUMBER = 'Target numbers separated by comma, e.g. 8962239013,7773854335'
You can also add these to options variable
sender_id - A custom name for SMS sender
language - english / unicode (Unicode supports other languages such as Hindi)
route - qt: Quick transactional
q: Promotional
t: Transactional
variable - For 5 characters: 5 = {#AA#}
For 10 characters: 10 ={#BB#}
For 15 characters: 15 ={#CC#}
For 20 characters: 20 ={#DD#}
For 25 characters: 25 ={#EE#}
For 30 characters: 30 ={#FF#}
variable_value -Your value for the template variable
message - If you are using templates message = template_id
You may find your template_id here https://www.fast2sms.com/dev/quick-templates?authorization=YOUR_AUTHORIZATION_KEY
FAQs
A Fast2SMS helper library for NodeJS
The npm package fast2sms receives a total of 53 weekly downloads. As such, fast2sms popularity was classified as not popular.
We found that fast2sms demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.