Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
instagram-threads-api
Advanced tools
A library to interface with the official Instagram Threads API
Go here 👉: https://www.npmjs.com/package/threads-graph-api
Github: https://github.com/spoolappio/threads-graph-api/
A Javascript library to interface with the official Instagram Threads API
Maintainers: @tonypeng, @ishaanbuildsthings
This is an unstable early preview release. Some endpoints may not work and the API is subject to change. Please submit an issue or a pull request if you encounter any issues.
The instagram-threads-api
repository provides a TypeScript client for interacting with the Instagram Threads API. This library simplifies the process of accessing Instagram's public and authenticated endpoints for managing media, retrieving user profiles, metrics, and more.
Install the package with your favorite package manager:
$ yarn add instagram-threads-api
or
$ npm install instagram-threads-api
instagram-threads-api
follows the official Threads API documentation for endpoints and parameters.
There are two types of clients provided by the library:
ThreadsPublicApiClient
ThreadsAuthenticatedApiClient
The ThreadsPublicApiClient
allows access to endpoints that do not require authentication.
import {ThreadsPublicApiClient} from 'instagram-threads-api';
const baseUrl = 'https://graph.threads.net';
const publicClient = new ThreadsPublicApiClient(
baseUrl, // optional
);
The ThreadsAuthenticatedApiClient
allows access to endpoints that require authentication.
import {ThreadsAuthenticatedApiClient} from 'instagram-threads-api';
const accessToken = 'your-access-token';
const userId = 'your-user-id';
const baseUrl = 'https://graph.threads.net'; // you can set this to your own server for testing
const authenticatedClient = new ThreadsAuthenticatedApiClient(
accessToken,
userId,
baseUrl, // optional
);
To create an authorization URL:
const clientId = 'your-client-id';
const redirectUri = 'your-redirect-uri';
const scope = ['threads_basic', ...];
const baseUrl = 'https://www.threads.net'; // you can set this to your own server for testing
const authUrl = publicClient.createAuthorizationUrl(
clientId,
redirectUri,
scope,
baseUrl, // optional
);
To exchange an authorization code for an access token:
const clientSecret = 'your-client-secret';
const code = 'auth-code';
const response = await publicClient.exchangeAuthorizationCode(clientId, clientSecret, redirectUri, code);
To create a media container:
const params = {
mediaType: 'TEXT',
text: 'Hello, World!',
};
const response = await authenticatedClient.createMediaContainer(params);
To publish a media container:
const params = {
creationId: 'media-creation-id',
};
const response = await authenticatedClient.publish(params);
To get user threads:
const params = {
id: 'user-id',
fields: ['id', 'media_type', 'media_url'],
};
const response = await authenticatedClient.getUserThreads(params);
To get a media object:
const params = {
id: 'media-id',
fields: ['id', 'media_type', 'media_url'],
};
const response = await authenticatedClient.getMediaObject(params);
To get a user's profile:
const params = {
id: 'user-id',
fields: ['id', 'username', 'threads_profile_picture_url'],
};
const response = await authenticatedClient.getUserProfile(params);
To get a user's threads publishing limit:
const params = {
id: 'user-id',
fields: ['reply_quota_usage', 'reply_config'],
};
const response = await authenticatedClient.getUserThreadsPublishingLimit(params);
To get a thread's replies:
const params = {
id: 'media-id',
fields: ['id', 'text', 'username'],
reverse: true,
};
const response = await authenticatedClient.getReplies(params);
To get a thread's conversation:
const params = {
id: 'conversation-id',
fields: ['id', 'text', 'username'],
reverse: true,
};
const response = await authenticatedClient.getConversation(params);
To manage a reply:
const params = {
id: 'reply-id',
hide: true,
};
const response = await authenticatedClient.manageReply(params);
To get media metrics:
const params = {
id: 'media-id',
metrics: ['views', 'likes'],
};
const response = await authenticatedClient.getMediaMetrics(params);
To get account metrics:
const params = {
id: 'user-id',
metrics: ['followers_count'],
};
const response = await authenticatedClient.getAccountMetrics(params);
Contributions are welcome (and encouraged)! Please open an issue or submit a pull request.
This project is licensed under the MIT License. See the LICENSE file for details.
FAQs
A library to interface with the official Instagram Threads API
We found that instagram-threads-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.