Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
ping-email
Advanced tools
npm install ping-email
# or
yarn add ping-email
import { PingEmail } from "ping-email";
const pingEmail = new PingEmail({
port: 25, // Default SMTP port
fqdn: "mail.example.org", // Fully Qualified Domain Name of your SMTP server
sender: "name@example.org", // Email address to use as the sender in SMTP checks,
timeout: 10000, // Time in milliseconds to wait for a response from the SMTP server
attempts: 3, // Number of attempts to verify the email address
});
To verify an email address using ping-email
, call the ping method with the target email address:
const { email, valid, message } = await pingEmail.ping("test@example.com");
if (valid) {
console.log("Email is valid:", email);
} else {
console.error("Verification failed:", message);
}
The ping method returns an object with the following properties:
email
: The email address being verified.valid
: A boolean indicating the overall validity of the email based on syntax, domain, and SMTP checks.success
: A boolean indicating if the verification process executed without encountering system-level errors (e.g., network issues).message
: A string providing detailed feedback about the verification outcome. This message can be one of the following, as defined in PingResponseMessages
:
"Valid email"
: The email address is valid."Invalid email"
: The email address is invalid."Valid domain"
: The domain of the email address is valid."Invalid domain"
: The domain of the email address is invalid."Email is required"
: No email address was provided for verification."No MX records found"
: The domain does not have MX records, indicating it cannot receive emails."Invalid email syntax"
: The email address provided does not meet the syntactical standards for email addresses."SMTP connection error"
: There was an error connecting to the SMTP server for verification."Disposable email is not allowed"
: The email address belongs to a disposable email provider."Domain verification failed"
: The domain verification process failed."Unable to verify email"
: The email verification process failed for an unknown reason."Connection timeout"
: The connection to the SMTP server timed out."Exceeded attempts"
: The maximum number of attempts to verify the email address was exceeded."Valid email (ignored SMTP verification)"
: The email address is valid, but the SMTP verification process was skipped.These messages provide clear insights into the verification process, helping you understand the specific reason for an email's validation outcome.
When integrating ping-email
into your applications, pay special attention to the success and message properties in the ping method response. They are key to identifying and handling different scenarios, such as invalid email syntax, domain issues, or SMTP server connectivity problems. Logging these details can be helpful for debugging purposes or improving user feedback in your application interface.
You can customize ping-email
by providing different options when you instantiate it. The available options are:
port
: The port number to connect to the SMTP server (default: 25)
.attempts
: The number of attempts to verify the email address (default: 3)
.fqdn
: The Fully Qualified Domain Name of your SMTP server (default: "mail.example.org")
.sender
: The email address used as the sender in SMTP checks (default: "name@example.org")
.timeout
: The time in milliseconds to wait for a response from the SMTP server (default: 10000)
.ignoreSMTPVerify
: A boolean indicating whether to skip the SMTP verification process (default: false)
.debug
: A boolean indicating whether to enable debug mode, which logs detailed information about the verification process (default: false)
.This allows you to tailor the library to your specific requirements, ensuring compatibility with your email verification workflow.
Here's a complete example demonstrating how to verify an email address:
import { PingEmail } from "ping-email";
const pingEmail = new PingEmail({
port: 587,
fqdn: "smtp.example.org",
sender: "verify@example.org",
timeout: 15000,
attempts: 5,
});
const { email, valid, success, message } = await pingEmail.ping("user@example.com");
Simple Mail Transfer Protocol (SMTP) is the standard protocol for sending emails across the Internet. It defines the rules for how email messages are transmitted between mail servers, and how users' email clients submit outgoing emails to their outgoing mail server.
Validating email addresses is crucial for several reasons:
Port: In the context of SMTP, a port is a numerical designation that specifies a specific gateway for network communication. Common SMTP ports include 25 (default SMTP), 587 (for encrypted SMTP), and 465 (SMTPS).
FQDN (Fully Qualified Domain Name): This refers to the complete domain name of an Internet resource. In SMTP settings, it specifies the domain name of the SMTP server that is used to send emails. For example, smtp.example.com
.
Sender: The email address that appears in the 'From' field of an email. In email verification, it's used to simulate the sending process without actually sending an email, helping to verify the validity of the recipient's address.
Understanding these concepts is crucial for effectively utilizing ping-email
and comprehending the mechanics of email verification and delivery.
When using ping-email
for SMTP email verification, there is a risk of IP blocking. This risk arises because the method employed by the library to verify email addresses can be perceived as suspicious by email servers, especially when requests are frequent or in large volumes. Email servers may interpret these verification attempts as spam or malicious activity, leading to the blocking of your IP address.
To mitigate this risk, it is crucial to use the library responsibly and understand the implications of SMTP email verification. If you are conducting bulk email verifications or are concerned about the potential for IP blocking, consider the following guidelines:
ignoreSMTPVerify
OptionThe ignoreSMTPVerify
option in ping-email
allows you to skip the SMTP verification process, which can help reduce the risk of IP blocking. However, it is important to note that by doing so, you may miss out on valuable insights into the validity of email addresses and the integrity of the recipient's domain.
Here's an example of how to use the ignoreSMTPVerify
option:
const pingEmail = new PingEmail({
ignoreSMTPVerify: true,
});
By following these guidelines and using ping-email
judiciously, you can effectively verify email addresses while minimizing the risk of IP blocking and maintaining the integrity of your email verification processes.
This library, ping-email
, was inspired by the email-verify
project. We extend our sincere gratitude to the creators and contributors of email-verify
for their innovative work in the field of email verification.
We are always posting about our latest news and updates on our Newsroom. Check it out!
To receive updates about our Engineering team, follow along on Twitter.
Licensed under the MIT License, Copyright © 2024-present Pingback.
See LICENSE for more information.
FAQs
Node.js SMTP Email Verification Library
The npm package ping-email receives a total of 44 weekly downloads. As such, ping-email popularity was classified as not popular.
We found that ping-email demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.