
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
koishi-plugin-autowithdraw-fix
Advanced tools
[<ruby>**代理发送消息!**<rp>(</rp><rt>点我查看效果预览图</rt><rp>)</rp></ruby>](https://i0.hdslb.com/bfs/article/585ce85165936462a105f0162b4ddde8312276085.gif) 支持强制回复指令、指令撤回时 自动撤回响应、定时撤回机器人的所有消息。
自动撤回 Koishi 机器人发送的消息,并在消息被撤回后,自动撤回机器人回复的关联消息。
session.sn
的过期时间,防止内存占用过多。插件提供以下配置选项:
quoteEnable
(boolean): 是否以引用的方式回复用户的指令。如果启用,机器人回复的消息会引用用户的原始消息。 默认为 false
。withdrawExpire
(number): 记录 session.sn
的过期时间,单位为秒。 超过这个时间后,插件会清理已撤回的 session.sn
记录,释放内存。默认为 60
秒。loggerinfo
(boolean): 是否开启详细的日志调试输出。 开启后,插件会在控制台输出更多的调试信息,方便开发者排查问题。 默认为 false
。 警告: 开启此选项可能会产生大量的日志输出。morequoteEnable
(array): 自定义消息前缀配置。可以配置多个消息元素作为前缀,支持变量替换。每个配置项包含:
hModel
: 使用的消息元素类型,支持 'text'、'at'、'sharp'、'quote'、'image'、'audio'、'video'、'file' 等value
: 传入参数,可以是固定文本或变量表达式replacecontent
: 是否将 value 作为变量表达式处理示例配置1 (默认):
[
{
"hModel": "quote",
"value": "session.messageId",
"replacecontent": true
}
]
示例配置2:
[
{
"hModel": "quote",
"value": "session.messageId",
"replacecontent": true
},
{
"hModel": "at",
"value": "session.userId",
"replacecontent": true
},
{
"hModel": "text",
"value": "你好"
}
]
此配置会在消息前添加:引用原消息 + @发送者 + 文本"你好"
message-deleted
事件。quoteEnable
选项,机器人会以引用的方式回复用户的指令。withdrawExpire
设置得太小可能会导致插件无法正确撤回消息。loggerinfo
选项仅用于调试目的,不建议在生产环境中开启。FAQs
[<ruby>**代理发送消息!**<rp>(</rp><rt>点我查看效果预览图</rt><rp>)</rp></ruby>](https://i0.hdslb.com/bfs/article/585ce85165936462a105f0162b4ddde8312276085.gif) 支持强制回复指令、指令撤回时 自动撤回响应、定时撤回机器人的所有消息。
The npm package koishi-plugin-autowithdraw-fix receives a total of 0 weekly downloads. As such, koishi-plugin-autowithdraw-fix popularity was classified as not popular.
We found that koishi-plugin-autowithdraw-fix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.