
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
nature-remo
Advanced tools
yarn add nature-remo
# or
npm install nature-remo
const NatureRemo = require('nature-remo')
const client = new NatureRemo.Cloud(process.env.NATURE_REMO_CLOUD_API_TOKEN)
async function turnOffAirConditioner() {
const airconList = await client.listAircon()
const aircon = airconList[0]
await client.updateAirconSettings(aircon.id, {
button: 'power-off',
})
console.log('Aircon: turned off')
}
async function turnOnAirConditioner() {
const airconList = await client.listAircon()
const aircon = airconList[0]
await client.updateAirconSettings(aircon.id, {
operation_mode: 'cool',
temperature: 24,
})
console.log('Aircon: turned on')
}
You might want to grab an API token from https://home.nature.global.
const NatureRemo = require('nature-remo')
See Cloud API Documents.
const client = new NatureRemo.Cloud(NATURE_REMO_CLOUD_API_TOKEN)
See Local API Documents.
const client = new NatureRemo.Local(NATURE_REMO_LOCAL_ADDRESS)
git clone https://github.com/uetchy/nature-remo # clone this repository
cd nature-remo # move to the repository folder
yarn install # install deps
NATURE_REMO_CLOUD_TOKEN=<nature-remo-cloud-api-token> yarn test # run test before creating a pull request
Thanks goes to these wonderful people (emoji key):
Yasuaki Uechi 💻 📖 | Kosuge Kazuya 💻 | Satoshi Nakamatsu 💻 | kyo5884 💻 | Mitsuteru Asari 💻 | Chris 💻 |
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
Nature Remo API client
We found that nature-remo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.