
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A highly customizable Twitter bot for all kinds of nonsense.
This is intended to be used as a docker image. It is hosted on Docker Hub.
Install with docker pull lnwdr/mintrahl
You can install it from NPM as well:
npm install -g mintrahl
Now you will need one or more bot definitons. Here's a minimal example:
my_bot.js
:
module.exports = {
auth: {
// put your twitter app's auth info here:
consumer_key: '#####################',
consumer_secret: '#####################',
access_token: '########################',
access_token_secret: '###################'
},
owner: 'lnwdr',
botSetup: (bot) => {
/*
Here you define what your bot should actually do.
You can use instances of `markov-strings` and `compromise` (nlp) here which are suppliead
in `bot.utils`.
For example, this one will repsond to every direct message with "Yes".
*/
bot.on('directMessage', dm => {
bot.sendDirectMessage(dm.sender.screen_name, 'Yes')
})
}
}
The bot will emit the following events from the Twitter API:
reply
directMessage
favorite
rewteet
follow
In addition it will emit a command
event: a direct message from the "owner" username starting with a "/" followed by the command name, e.g. "/tweet whatever". the command event contains the name
and the content
(the rest of the DM) of the command. Use these commands to reomte control your bot.
The contents of to bot.utils
are:
markov-strings
compromise
They are entirely optional to use, though.
Use bot.log()
for logging, it works just like console.log
. It will write to stdout and prefix a timestamp and the bot's username.
Now start the bot with
docker run --rm -v $(pwd):/data lnwdr/mintrahl my_bot.js
If you installed directly from NPM:
mintrahl my_bot.js
FAQs
A highly customizable Twitter bot for all kinds of nonsense.
The npm package mintrahl receives a total of 1 weekly downloads. As such, mintrahl popularity was classified as not popular.
We found that mintrahl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.