
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
hubot-search
Advanced tools
An extendable Hubot script for querying several search engine services: Google Custom Search, and Bing Search API.
An extendable Hubot script for querying several search engine services: Google Custom Search, Azure Marketplace - Bing Search API v2, and Microsoft Cognitive Services - Bing Search API v5.
See src/search.coffee for full documentation.
Attention: Azure Marketplace "Bing Search" and "Bing Search Web Results Only" API (v2) offerings will end of life on December 15, 2016.
Currently by default, this script will use Azure Marketplace - Bing Search API v2, and the BING_SEARCH_API_KEY environment variable should be the v2 key (from Azure Marketplace).
Nevertheless, we strongly recommend that you use Microsoft Cognitive Services - Bing Search API v5 by setting USE_BING_V5 to true in the environment that is using this script, and ensuring the BING_SEARCH_API_KEY is the v5 key (from Cognitive Services).
USE_BING_V5 will not be necessary by 2017 when the v2 API is deprecated at end of life.
Install the hubot-search module as a Hubot dependency by running:
npm install --save hubot-search
Enable the module by adding the hubot-search entry to your external-scripts.json file:
[
"hubot-search"
]
Run your bot and see below for available config / commands
| Variable | Default | Description |
|---|---|---|
GOOGLE_API_KEY | N/A | A unique developer API key is required to use Google's Custom Search API |
GOOGLE_CUSTOM_SEARCH | N/A | The Google Custom Search engine identifier (the cx portion of the custom search engine URL) |
BING_SEARCH_API_KEY | N/A | The API key for performing Bing Search API queries |
MAX_SEARCH_RESULTS | 5 | The number of search results to return |
The Google Custom Search command listener will not be registered if neither GOOGLE_API_KEY nor GOOGLE_CUSTOM_SEARCH environment variables are defined.
Create a new Google Custom Search engine: https://cse.google.com/cse/create/new
To search all websites, enter any web URL in (1), and complete the creation
Edit your newly created search engine
Set "Sites to search" to "Search the entire web but emphasize included sites", and delete the sites you have previously added
Save, and export the variables:
export GOOGLE_API_KEY="API KEY HERE"
export GOOGLE_CUSTOM_SEARCH="ENGINE ID HERE"
The Bing Search API command listener will not be registered if BING_SEARCH_API_KEY is not defined.
Subscribe for a "Bing Search API – Web Results Only" package / plan (free works fine)
Obtain the primary account key (located at the top of the page under "Show")
Export the API key:
export BING_SEARCH_API_KEY="API KEY HERE"
The Bing Search API command listener will not be registered if BING_SEARCH_API_KEY is not defined.
Subscribe for a "Bing Web Search" package / plan (free works fine)
Obtain the API key (located in the "Keys" column; click "Show")
Export the API key:
export BING_SEARCH_API_KEY="API KEY HERE"
export USE_BING_V5="true"
| Command | Listener ID | Description |
|---|---|---|
| hubot `<search | google> query` | search.google |
hubot bing query | search.bing | Queries Bing Search API for query, and returns the first MAX_SEARCH_RESULTS results |
user1>> hubot search Elon Musk
hubot>> 1. Elon Musk - Wikipedia, the free encyclopedia: Elon Reeve Musk is a South African-born Canadian-American business magnate
, engineer, and investor. He is the founder, CEO and CTO of SpaceX; ... (https://en.wikipedia.org/wiki/Elon_Musk)
hubot>> ...
FAQs
An extendable Hubot script for querying several search engine services: Google Custom Search, and Bing Search API.
We found that hubot-search demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.