
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
netease-api
Advanced tools
网易云音乐 Node.js API service
需要 NodeJS 8.12+ 环境
npm i -g netease-api
$ netease-api
服务器启动默认端口为 3000,若不想使用 3000 端口,可使用以下命令: Mac/Linux
$ PORT=4000 netease-api
windows终端执行以下命令:
$ set PORT=4000 && netease-api
v4.0.8 加入了 Vercel 配置文件,可以直接在 Vercel 下部署了,不需要自己的服务器
New ProjectImport Git Repository 并选择你 fork 的此项目并点击 importPERSONAL ACCOUNT 的 selectContinuePROJECT NAME自己填,FRAMEWORK PRESET 选 Other 然后直接点 Deploy 接着等部署完成即可v3.31.0后支持Node.js调用,导入的方法为 module内的文件名,返回内容包含 status和 body,status为状态码,body为请求返回内容,参考 module_example 文件夹下的 test.js
const { login_cellphone, user_cloud } = require('NeteaseCloudMusicApi')
async function main() {
try {
const result = await login_cellphone({
phone: '手机号',
password: '密码'
})
console.log(result)
const result2 = await user_cloud({
cookie: result.body.cookie // 凭证
})
console.log(result2.body)
} catch (error) {
console.log(error)
}
}
main()
// test.ts
import { banner } from 'NeteaseCloudMusicApi'
banner({ type:0 }).then(res=>{
console.log(res)
})

$ npm test

| 语言 | 作者 | 地址 | 类型 |
|---|---|---|---|
| Java | JackuXL | https://github.com/JackuXL/NeteaseCloudMusicApi-SDK | 第三方 |
| Java | 1015770492 | https://github.com/1015770492/yumbo-music-utils | 第三方 |
FAQs
网易云音乐 NodeJS 版 API
The npm package netease-api receives a total of 0 weekly downloads. As such, netease-api popularity was classified as not popular.
We found that netease-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.