
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
node-tip-bot
Advanced tools
To install node-tip-bot simply clone this repo and install dependencies:
git clone https://github.com/nrpatten/node-tip-bot
cd node-tip-bot
npm install
After installation proceed to the configuration.
To configure, copy the config/config.sample.yml file to config/config.yml.
IRC network connection info.
IRC network connection and login info.
List of channels to auto-join to.
Web interface settings.
name: password formatLogging settings.
false to disable logging to file.JSON RPC API connection info.
Basic coin settings.
LTC)Litecoin)Here you can restrict some commands to work only on PM/channel.
Whatever the bot says. Supports expandable variables (eg. %nick% for bot's nick). By default all config vars from rpc section are available.
Every nickname has it's own account in your wallet. When tipping or withdrawing, bot checks if user is registered and identified with NickServ. If so, he moves the money from one account to another, or when withdrawing, transfers coins to other wallet.
Before running the bot, you have to be running your coin daemon with JSON-RPC API enabled. To enable, add this to your coin daemon configuration file (eg. ~/.litecoin/litcoin.conf):
server=1
daemon=1
rpcuser=<your username>
rpcpassword=<your super secret password>
rpcallowip=<your bot's ip address or just 127.0.0.1 if hosted on the same machine>
To run the bot simply use node bin/tipbot or npm start.
IF you ger this error:
npm WARN This failure might be due to the use of legacy binary "node"
npm WARN For further explanations, please read
/usr/share/doc/nodejs/README.Debian
Run:
sudo add-apt-repository ppa:chris-lea/node.js
sudo apt-get update
sudo apt-get install python-software-properties python g++ make nodejs
To change the ticker for your coin edit config/config.yml line 39 - 50 and add your own Cryptsy, AllCoin and BTC-e coin ticker link.
Currently only supports Cryptsy, AllCoin and BTC-e.
See config/config.yml line 33 - 50, 61 -75, 104 -108 and bin/tipbot.js 267 to 351 to add your own exchange json.
| Command | Arguments | Description |
|---|---|---|
balance | displays your current wallet balance | |
address | displays address where you can send your funds to the tip bot | |
withdraw | <address> | withdraws your whole wallet balance to specified address |
tip | <nick> <amount> | sends the specified amount of coins to the specified nickname |
rain | <amount> [max] | sends the specified amount of coins to the channel |
networkhps | displays the current network hashpersec | |
diff | displays the current network difficulty | |
block | displays the current network block | |
info | displays the current network khps/difficulty/block | |
ticker | displays your current Allcoin coin price | |
ticker2 | displays your current Cryptsy coin price | |
btc | displays the current BTC-e BTC price | |
joke | displays a random joke | |
random | displays a random quote | |
help | displays configured help message (by default similiar to this one) | |
terms | displays terms and conditions for using the tip bot |
FAQs
node.js based tipping bot for script altcoins
We found that node-tip-bot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.