
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
google-oauth-quick-token
Advanced tools
Simple cli tool to quickly approve and retrieve Google OAuth2 tokens for making request to Google APIs.
Command line to tool to quickly retrieve an Google OAuth2 tokens for API access to Google APIs.
Most Google APIs only allow access by using OAuth2 as the authorisation mechanism. If you're running a background process or application without a GUI it can be tricky to get started since OAuth2 requires a step where a logged in user authorises your application (typically via a browser) before you can retrieve an API access token. Once the token is retrieved, this step will not need to be repeated since most OAuth applications will refresh their tokens automatically.
This commandline script lets you very quickly retrieve an OAuth2 token you can then use in your application to make requests to Google APIs.
npm install google-oauth-quick-token -g
google-oauth-quick-token
from the command lineThe way OAuth2 works is that your application has a unique identifier and a person then authorises that application identifier to be able to access the persons data via an API.
These steps are designed for an application that has no GUI and needs long life tokens. If your application has a GUI, then it is better to follow the recommended OAuth flow described by Google.
APIs & auth
then APIs
from the side menu and select what APIs you want to enable for your applicationCredentials
and then Add credentials
(if this is the first time you may be prompted to create an OAuth consent screen).Other
as the Application typeFAQs
Simple cli tool to quickly approve and retrieve Google OAuth2 tokens for making request to Google APIs.
The npm package google-oauth-quick-token receives a total of 0 weekly downloads. As such, google-oauth-quick-token popularity was classified as not popular.
We found that google-oauth-quick-token demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.