
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
kijiji-fb-bot
Advanced tools
A node.js bot that scrapes recent Kijiji ads and sends them in a Facebook message.
npm install kijiji-fb-bot
You can configure the bot by placing the following JSON files in a configuration directory:
botprops.json - Contains basic bot properties: {
"name": "bot name (used for chat commands)",
"chatId": <chat id to send automatic updates>,
"scrapeInterval": <frequency of scrapes (in ms)>,
"remoteAdmin": <1 or 0>
}
facebook.json - Contains the Facebook credentials the bot will use to log in:{
"email": "Facebook account email",
"password": "Facebook account password"
}
adprefs.json - Contains the Kijiji ad search category and location. See the prefs argument for kijiji-scraper's query() function.
searchparams.json - Contains the Kijiji ad search criteria. See the params argument for kijiji-scraper's query() function.
Will call callback with a function to stop the bot.
configDir - The directory containing the bot's configuration files.
callback(err, stop) - A callback called after the bot has been started. If there is an error, err will not be null. If everything was successful, stop will be a function that, when called, sets the bot to stop after the next chat message is received. It cannot be stopped immediately as a result of a limitation of the facebook-chat-api module.
var bot = require("kijiji-fb-bot");
bot("json/botconfig", function(err, stop) {
//The bot will work its magic
//Call stop() when done
});
The bot can be interacted with by sending it Facebook messages. Each command must be prefixed with the bot name specified in botprops.json. The following commands are supported:
list - The bot will reply with a list of the last scraped ads.scrape - The bot will scrape and reply with ads posted to Kijiji since the last scrape.info - The bot will reply with information about its state.help - The bot will reply with information about its chat commands.Additionally, if remoteAdmin is set to 1 in botprops.json, the following chat commands will be available:
botprop [prop] [val] - Will set the value of property prop specified in botprops.json to val.adpref [pref] [val] - Will set the value of preference pref specified in adprefs.json to val.searchparam [param] [val] - Will set the value of parameter param specified in searchparams.json to val.If the val argument is omitted for any of these commands, the bot will reply with the current value.
[BOTNAME] [COMMAND] [ARGS]
FAQs
A bot that sends Facebook messages with new Kijiji ads
We found that kijiji-fb-bot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.