
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
getsmscode2
Advanced tools
API client for getsmscode.com.
This module requires node >= 8
.
npm install --save getsmscode2
You'll need to setup a getsmscode.com account and add some money to your account before using this module.
const GetSMSCodeClient = require('getsmscode2')
const client = new GetSMSCodeClient({
username: '...',
token: '...'
})
const number = await client.getNumber({
service: 'google'
})
// give this number to third-party service such as google...
// third-party service sends SMS code to the given number...
const sms = await client.getSMS({
service: 'google',
number: number
})
Note: there may be variable amounts of latency between giving your number to the service and the SMS code being received. If no valid messages are returned, it is recommended that you retry client.getSMS
with an exponential timeout. Be careful not to call the API too fast, however, as getsmscode
imposes strict rate limits.
Type: function (opts)
opts
object? Config options
Logs in to test auth and fetches an account summary.
Type: function (): Promise
Acquires a temporary handle on a mobile number usable for the given service.
You must specify either opts.service
or opts.pid
.
Type: function (opts): Promise
opts
object Config options
Returns a list of { number, service }
objects currently in use by this account.
Type: function (): Promise
Release a number { number }
currently in use by this account.
Type: function (): Promise
You must specify either opts.service
or opts.pid
.
Type: function (opts): Promise
opts
object Config options
Adds a number to this account's blacklist for the given service.
You must specify either opts.service
or opts.pid
.
Type: function (opts): Promise
opts
object Config options
Using this software to violate the terms and conditions of any third-party service is strictly against the intent of this software. By using this software, you are acknowledging this fact and absolving the author or any potential liability or wrongdoing it may cause. This software is meant for testing and experimental purposes only, so please act responsibly.
MIT © Travis Fischer
Support my OSS work by following me on twitter
FAQs
API client for getsmscode.com
The npm package getsmscode2 receives a total of 5 weekly downloads. As such, getsmscode2 popularity was classified as not popular.
We found that getsmscode2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.