Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Kickbox determines if an email address is not only valid, but associated with a actual user. Uses include:
To begin, hop over to kickbox.com and create a free account. Once you've signed up and logged in, click on API Settings and then click Add API Key. Take note of the generated API Key - you'll need it to setup the client as explained below.
Make sure you have npm installed.
$ npm install kickbox
Works with Node 0.8+
var kickbox = require('kickbox').client('Your_API_Key_Here').kickbox();
kickbox.verify("test@example.com", function (err, response) {
// Let's see some results
console.log(response.body);
});
timeout integer
(optional) - Maximum time, in milliseconds, for the API to complete a verification request. Default: 6000.
// Example with options
kickbox.verify("test@example.com", {timeout: 6000}, function (err, response) {/*...*/});
A successful API call responds with the following values:
string
- The verification result: deliverable
, undeliverable
, risky
, unknown
string
- The reason for the result. Possible reasons are:
invalid_email
- Specified email is not a valid email address syntaxinvalid_domain
- Domain for email does not existrejected_email
- Email address was rejected by the SMTP server, email address does not existaccepted_email
- Email address was accepted by the SMTP serverlow_quality
- Email address has quality issues that may make it a risky or low-value addresslow_deliverability
- Email address appears to be deliverable, but deliverability cannot be guaranteedno_connect
- Could not connect to SMTP servertimeout
- SMTP session timed outinvalid_smtp
- SMTP server returned an unexpected/invalid responseunavailable_smtp
- SMTP server was unavailable to process our requestunexpected_error
- An unexpected error has occurredtrue | false
- true if the email address is a role address (postmaster@example.com
, support@example.com
, etc)true | false
- true if the email address uses a free email service like gmail.com or yahoo.com.true | false
- true if the email address uses a disposable domain like trashmail.com or mailinator.com.true | false
- true if the email was accepted, but the domain appears to accept all emails addressed to that domain.null | string
- Returns a suggested email if a possible spelling error was detected. (bill.lumbergh@gamil.com
-> bill.lumbergh@gmail.com
)float
- A quality score of the provided email address ranging between 0 (no quality) and 1 (perfect quality). More information on the Sendex Score can be found here.string
- Returns a normalized version of the provided email address. (BoB@example.com
-> bob@example.com
)string
- The user (a.k.a local part) of the provided email address. (bob@example.com
-> bob
)string
- The domain of the provided email address. (bob@example.com
-> example.com
)true | false
- true if the API request was successful (i.e., no authentication or unexpected errors occurred)Along with each response, the following HTTP headers are included:
X-Kickbox-Balance
- Your remaining verification credit balance (Daily + On Demand).X-Kickbox-Response-Time
- The elapsed time (in milliseconds) it took Kickbox to process the request.MIT
Report here.
FAQs
Official kickbox API library client for node.js
The npm package kickbox receives a total of 1,661 weekly downloads. As such, kickbox popularity was classified as popular.
We found that kickbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.