
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
funpay-js-api
Advanced tools
This is a Node.js API project designed to interact with the Funpay.com website. The API allows for seamless integration and communication with Funpay's services, making it easier to develop applications that rely on Funpay's features.
This is a Node.js API project designed to interact with the Funpay.com website. The API allows for seamless integration and communication with Funpay's services, making it easier to develop applications that rely on Funpay's features.
To install the necessary dependencies, run the following command:
npm i funpay-js-api
import { Api, Runner, Chat } from "funpay-js-api";
const goldenkey = 'YOUR GOLDEN KEY FROM COOKIES';
class app {
constructor(){
Api.setConfig(goldenkey);
this.test()
}
async test(){
Runner.on('orders_counters', (data)=>{
console.log('updated order counter', data);
})
Runner.on('chat_counter', (data)=>{
console.log('updated chat counter', data);
})
let neworders = await Api.getNewOrders();
console.log('neworders', neworders);
let chat = new Chat(11936609, 1);
chat.on('message', (msg)=>{
console.log(msg);
});
}
}
new app();
The Api class provides methods for interacting with the Funpay API.
setConfig(key: string): Promise<void>
getUserLastMessage(id: number): Promise<string>
getOffers(id?: number): Promise<any>
getLots(node: string): Promise<any>
getOfferPage(node: string, offer: string): Promise<any>
updateOfferPage(offerPage: any): Promise<any>
updatePrice(node: string, offer: string, price: number): Promise<void>
getUserLangById(id: number): Promise<string>
getUserByDialogId(dialogId: string): Promise<{ userId: string, lang: string }>
getDialogs(): Promise<any[]>
getLastOrders(): Promise<any[]>
getNewOrders(): Promise<any[]>
refund(orderId: string): Promise<any>
svgtopng(base64Svg: string): Promise<Buffer>
uploadFileFromBuffer(imageBuffer: Buffer, contentType: string): Promise<any>
uploadFileFromUrl(src: string): Promise<any>
The Runner class handles chat interactions and emits events.
on(event: 'orders_counters', listener: (data: any) => void): void
on(event: 'chat_counter', listener: (data: any) => void): void
off(event: 'orders_counters', listener: (data: any) => void): void
off(event: 'chat_counter', listener: (data: any) => void): void
Chat ClassThe Chat class manages individual chat instances, allowing you to send messages, send files, and handle chat-specific events.
constructor(id: number, lastMessage?: number)
id (number): The ID of the chat.lastMessage (optional, number): The ID of the last message (if available).sendMessage(message: string): Promise<void>
message (string): The message text to send.sendFile(fileid: string): Promise<void>
fileid (string): The ID of the file to send.remove(): Promise<void>
on(event: 'message', listener: (message: object) => void): void
event (string): The event type ('message').listener (function): The callback function to handle incoming messages. The function receives a message object as an argument.off(event: 'message', listener: (message: object) => void): void
event (string): The event type ('message').listener (function): The callback function to remove.This project was created by Aleksandr Iurov for https://buynstars.com.
FAQs
This is a Node.js API project designed to interact with the Funpay.com website. The API allows for seamless integration and communication with Funpay's services, making it easier to develop applications that rely on Funpay's features.
The npm package funpay-js-api receives a total of 8 weekly downloads. As such, funpay-js-api popularity was classified as not popular.
We found that funpay-js-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.