
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
ordrin-api
Advanced tools
A node library for the ordr.in API. See full API documentation at http://hackfood.ordr.in
order_guest)order_user)delivery_check)delivery_list)fee)restaurant_details)change_password)create_account)create_addr)create_cc)delete_addr)delete_cc)get_account_info)get_all_saved_addrs)get_all_saved_ccs)get_order)get_order_history)get_saved_addr)get_saved_cc)This library can be installed with npm:
npm install ordrin-api
Because node is async, every function call you make to the ordrin api includes a
callback. This callback will be called when the API has finished processing the
request. This callback takes two arguments, error and data. If the request
fails, then error will be an Error object; otherwise it will be falsy. The
data argument contains the JavaScript object returned by the API.
var ordrin = require("ordrin-api");
// Initialize with your application secret key
var ordrin_api = new ordrin.APIs(api_secret_key, servers);
In the initializer, the second argument sets the servers that API requests will
be sent to, and must be set to either ordrin.PRODUCTION or ordrin.TEST
(defaults to ordrin.TEST).
ordrin_api.order_guest(args, callback)
args.rid : Ordr.in's unique restaurant identifier for the restaurant. (A number)args.em : The customer's email addressargs.tray : Represents a tray of menu items in the format '[menu item id]/[qty],[option id],...,[option id]'args.tip : Tip amount in dollars and centsargs.first_name : The customer's first nameargs.last_name : The customer's last nameargs.phone : The customer's phone numberargs.zip : The zip code part of the address (5 digits)args.addr : The street addressargs.addr2 : The second part of the street address, if neededargs.city : The city part of the addressargs.state : The state part of the address (Two letters)args.card_name : Full name as it appears on the credit cardargs.card_number : Credit card number (16 digits)args.card_cvc : 3 or 4 digit security code (3 or 4 digits)args.card_expiry : The credit card expiration date. (mm/yyyy)args.card_bill_addr : The credit card's billing street addressargs.card_bill_addr2 : The second part of the credit card's biling street address.args.card_bill_city : The credit card's billing cityargs.card_bill_state : The credit card's billing state (2 letters)args.card_bill_zip : The credit card's billing zip code (5 digits)args.card_bill_phone : The credit card's billing phone numberargs.delivery_date : Delivery date (mm-dd)args.delivery_time : Delivery time (HH:MM)args.delivery_date : Delivery date (ASAP)ordrin_api.order_user(args, callback)
args.rid : Ordr.in's unique restaurant identifier for the restaurant. (A number)args.tray : Represents a tray of menu items in the format '[menu item id]/[qty],[option id],...,[option id]'args.tip : Tip amount in dollars and centsargs.first_name : The customer's first nameargs.last_name : The customer's last nameargs.email : The user's email addressargs.current_password : The user's current passwordargs.phone : The customer's phone numberargs.zip : The zip code part of the address (5 digits)args.addr : The street addressargs.addr2 : The second part of the street address, if neededargs.city : The city part of the addressargs.state : The state part of the address (Two letters)args.nick : The delivery location nickname. (From the user's addresses)args.card_name : Full name as it appears on the credit cardargs.card_number : Credit card number (16 digits)args.card_cvc : 3 or 4 digit security code (3 or 4 digits)args.card_expiry : The credit card expiration date. (mm/yyyy)args.card_bill_addr : The credit card's billing street addressargs.card_bill_addr2 : The second part of the credit card's biling street address.args.card_bill_city : The credit card's billing cityargs.card_bill_state : The credit card's billing state (2 letters)args.card_bill_zip : The credit card's billing zip code (5 digits)args.card_bill_phone : The credit card's billing phone numberargs.card_nick : The credit card nickname. (From the user's credit cards)args.delivery_date : Delivery date (mm-dd)args.delivery_time : Delivery time (HH:MM)args.delivery_date : Delivery date (ASAP)ordrin_api.delivery_check(args, callback)
args.datetime : Delivery date and time (ASAP or mm-dd+HH:MM)args.rid : Ordr.in's unique restaurant identifier for the restaurant. (A number)args.addr : Delivery location street addressargs.city : Delivery location cityargs.zip : The zip code part of the address (5 digits)ordrin_api.delivery_list(args, callback)
args.datetime : Delivery date and time (ASAP or mm-dd+HH:MM)args.addr : Delivery location street addressargs.city : Delivery location cityargs.zip : The zip code part of the address (5 digits)ordrin_api.fee(args, callback)
args.datetime : Delivery date and time (ASAP or mm-dd+HH:MM)args.rid : Ordr.in's unique restaurant identifier for the restaurant. (A number)args.subtotal : The cost of all items in the tray in dollars and cents.args.tip : The tip in dollars and cents.args.addr : Delivery location street addressargs.city : Delivery location cityargs.zip : The zip code part of the address (5 digits)ordrin_api.restaurant_details(args, callback)
args.rid : Ordr.in's unique restaurant identifier for the restaurant. (A number)ordrin_api.change_password(args, callback)
args.email : The user's email addressargs.password : The user's new password (SHA256 hex encoded)args.current_password : The user's current passwordordrin_api.create_account(args, callback)
args.email : The user's email addressargs.pw : The user's passwordargs.first_name : The user's first nameargs.last_name : The user's last nameordrin_api.create_addr(args, callback)
args.email : The user's email addressargs.nick : The nickname of this addressargs.phone : The customer's phone numberargs.zip : The zip code part of the address (5 digits)args.addr : The street addressargs.addr2 : The second part of the street address, if neededargs.city : The city part of the addressargs.state : The state part of the address (Two letters)args.current_password : The user's current passwordordrin_api.create_cc(args, callback)
args.email : The user's email addressargs.nick : The nickname of this addressargs.card_number : Credit card number (16 digits)args.card_cvc : 3 or 4 digit security code (3 or 4 digits)args.card_expiry : The credit card expiration date. (Two digits/Four digits)args.bill_addr : The credit card's billing street addressargs.bill_addr2 : The second part of the credit card's biling street address.args.bill_city : The credit card's billing cityargs.bill_state : The credit card's billing state (2 letters)args.bill_zip : The credit card's billing zip code (5 digits)args.bill_phone : The credit card's billing phone numberargs.current_password : The user's current passwordordrin_api.delete_addr(args, callback)
args.email : The user's email addressargs.nick : The nickname of this addressargs.current_password : The user's current passwordordrin_api.delete_cc(args, callback)
args.email : The user's email addressargs.nick : The nickname of this addressargs.current_password : The user's current passwordordrin_api.get_account_info(args, callback)
args.email : The user's email addressargs.current_password : The user's current passwordordrin_api.get_all_saved_addrs(args, callback)
args.email : The user's email addressargs.current_password : The user's current passwordordrin_api.get_all_saved_ccs(args, callback)
args.email : The user's email addressargs.current_password : The user's current passwordordrin_api.get_order(args, callback)
args.email : The user's email addressargs.oid : Ordr.in's unique order id number. (A number)args.current_password : The user's current passwordordrin_api.get_order_history(args, callback)
args.email : The user's email addressargs.current_password : The user's current passwordordrin_api.get_saved_addr(args, callback)
args.email : The user's email addressargs.nick : The nickname of this addressargs.current_password : The user's current passwordordrin_api.get_saved_cc(args, callback)
args.email : The user's email addressargs.nick : The nickname of this addressargs.current_password : The user's current passwordFAQs
A node library for the ordr.in food ordering API
We found that ordrin-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.