
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
Typed client for tasnif.soliq.uz: search MXIK (IKPU) codes by keyword, barcode, brand or certificate
Unofficial typed JavaScript client for tasnif.soliq.uz, the national catalogue of goods and services of Uzbekistan. Find MXIK (IKPU) codes by keyword, barcode, brand or certificate number.
Not affiliated with the Tax Committee of Uzbekistan or tasnif.soliq.uz.
AbortSignalDocumentation · API reference · Changelog
npm i mxik
import { createMxik } from 'mxik'
const mxik = createMxik()
const { items } = await mxik.search('кофе')
console.log(items[0].mxikCode, items[0].name)
| Method | Returns | Description |
|---|---|---|
search(query, options?) | Page<SearchItem> | Full-text search over the catalog |
get(code, options?) | MxikDetails | null | Full card of a code, null if not found |
filter(filters, options?) | Page<CatalogItem> | Search by text, brand, code, barcode |
dvCert(number, options?) | Page<CatalogItem> | Codes linked to a certificate number |
card(code, options?) | MxikCard | null | Card with barcode, tax benefit and packages |
searchSubpositions(query) | Page<CatalogItem> | Search by product type, without a brand |
children(code?, options?) | Page<CatalogNode> | Next level of the catalog tree |
childrenAll(code?, options?) | AsyncGenerator<CatalogNode> | Every child, pages fetched lazily |
stats(), units(), taxBenefits() | CatalogStats, Unit[], TaxBenefit[] | Reference data |
searchAll(query, options?) | AsyncGenerator<SearchItem> | Every search result, pages fetched lazily |
filterAll(filters, options?) | AsyncGenerator<CatalogItem> | Every filter result, pages fetched lazily |
cache.clear() | Promise<void> | Drop cached results |
// Pagination and language, per request or as client defaults
const page = await mxik.search('кофе', { page: 2, size: 50, lang: 'uz' })
page.items
page.total
page.hasNext
// A single code
const details = await mxik.get('00406001001232001')
// By fields
await mxik.filter({ brand: 'Samsung' })
await mxik.filter({ barcode: '6934177746536' })
// All results
for await (const item of mxik.filterAll({ brand: 'Xiaomi' }))
console.log(item.mxikCode)
Also exported: isMxikCode(value) to validate the 17-digit format, and every type (SearchItem, CatalogItem, MxikDetails, Page, Filters and others).
const mxik = createMxik({
lang: 'ru', // 'ru' | 'uz'
pageSize: 20,
timeout: 10_000, // ms, 0 disables it
cache: false, // true, or a cache implementation
baseURL: 'https://tasnif.soliq.uz/api/cls-api',
fetch: globalThis.fetch,
headers: {},
})
All options are optional, the values above are the defaults.
Off by default. The catalog changes rarely, so caching saves a lot of requests.
import { createMemoryCache, createMxik } from 'mxik'
createMxik({ cache: true }) // in memory, 1 hour TTL, 500 entries
createMxik({ cache: createMemoryCache({ ttl: 10 * 60 * 1000, max: 2000 }) })
createMxik({ cache: new Map() }) // any MxikCache: get, set, delete, clear
Successful results and "not found" are cached, errors are not. See Cache for a Redis example.
| What happened | What you get |
|---|---|
HTTP error, non-JSON body, success: false | MxikError (status, reason) |
Code not found in get() | null |
| Nothing matched | Empty page |
Timeout or aborted signal | TimeoutError or AbortError |
| Network failure | TypeError from fetch |
import { MxikError } from 'mxik'
try {
await mxik.search('кофе')
}
catch (error) {
if (error instanceof MxikError)
console.log(error.status, error.reason)
}
npx mxik search кофе
npx mxik filter --barcode 6934177746536
npx mxik card 00901001001048023 --json
See CLI for all commands.
mxik-mcp lets Claude, Cursor and other AI assistants search codes:
claude mcp add mxik -- npx -y mxik-mcp
See MCP server for other clients.
baseURL.MxikClient, createMxikClient() and fetchBy* still work but are deprecated and will be removed in 2.0. See the migration guide.
FAQs
Typed client for tasnif.soliq.uz: search MXIK (IKPU) codes by keyword, barcode, brand or certificate
The npm package mxik receives a total of 8 weekly downloads. As such, mxik popularity was classified as not popular.
We found that mxik demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.