
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
npm-vwconnectidapi
Advanced tools
NPM package for a We Connect ID API based on https://github.com/TA2k/ioBroker.vw-connect
and https://github.com/nightsha-de/npm-vwconnectapi
Clone this repository to $path and use
sudo npm install -g npm-vwconnectidapi
to install.
const api = require('npm-vwconnectidapi');
const idStatusEmitter = api.idStatusEmitter;
var log = new api.Log();
var vwConn = new api.VwWeConnect();
vwConn.setLogLevel("INFO"); // optional, ERROR (default), INFO, WARN or DEBUG
vwConn.setCredentials("YourEmail", "YourPassword");
idStatusEmitter.on('currentSOC', (soc) => {
console.log(soc);
});
vwConn.getData()
.then(() => {
vwConn.setActiveVin("the VIN of your ID"); // must exist in vwConn.vehicles
//vwConn.startClimatisation().then(...)
//vwConn.stopClimatisation().then(...)
//vwConn.stopCharging().then(...)
vwConn.startCharging()
.then(() => {
log.info("Charging started");
})
.catch(() => {
log.error("Error while starting the charging");
})
.finally(() => {
log.info("Exiting ...");
vwConn.onUnload();
process.exit(1);
});
})
.catch(() => {
log.error("something went wrong");
process.exit(1);
});
All methods work with promises.
Login credentials. Pin is not needed for the ID cars.
Set/change the log level to "DEBUG", "INFO" or "ERROR" (default).
Fills all data objects. If the process is not explicitly exited after getData (see example) it will regularly update the data in a given interval.
Sets the VIN that is used for climatisation and charging. Setting is mandatory before clima or charging actions, VIN needs to exists in the vwConn.vehicles data.
Start the air-conditioning.
Set climatisation temperature.
setting can be:
climatizationAtUnlock
climatisationWindowHeating
climatisationWindowHeating
climatisationFrontLeft
climatisationFrontLeft
climatisationFrontRight
climatisationFrontRight. Set to true or false.
Stop the air-conditioning.
setting can be:
targetSOC: Target battery level in percent.
chargeCurrent: "maximum" of "reduced".
autoUnlockPlug: true or false, to automatically unlock plug when finished charging.
Change the target SOC and the maximum charge current ("maximum" or "reduced") for charging.
Start charging.
Stop charging.
Sends a destination to the navigation system. 'destination' is a JS object with the following structure.
{
destinations: [
{
poiProvider: "unknown",
geoCoordinate: {
longitude: 5.12345,
latitude: 52.12345
},
destinationName: "Home",
address: {
country: "Nederland",
street: "My Street 1",
zipCode: "1234 AA",
city: "My City"
}
}
]
}
'statusNotSafe' - car is parked and doors remain unlocked or windows opened for >5 minutes.
'parked' - Car is parked. Emits parking position as argument.
'notParked' - Car is on the move.
'chargePurposeReached' - Target state of charge reached.
'chargingStarted' - Charging started.
'chargingStopped' - Charging stopped.
'currentSOC' - Actuel state of charge changed. Emits SOC as argument.
'climatisationStopped' - Climatisation.
'climatisationStarted' - Climatisation started.
'climatisationCoolingStarted' - Climatisation started cooling.
'climatisationHeatingStarted' - Climatisation started heating.
'climatisationTemperatureUpdated' - Target climatisation temperature changed.
FAQs
Provides an API for We Connect ID
We found that npm-vwconnectidapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.