
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Easy and lightweight client for QIWI payment system.
This library is THE FIRST open source client for QIWI.
Currently this library is in development, so not all may work as expected.
$ npm install qiwi
QIWI = require('qiwi')
client = new QIWI.Client()
client.createSession((error, session) ->
unless error?
client.setSession(session)
client.accountInfo((error) ->
unless error?
console.log('Your account details:')
console.log(info)
else
console.log('Something went wrong:')
console.log(error)
undefined
)
else
console.log('Unable to open session')
console.log(error)
undefined
)
This class represents client for QIWI.
String Default w.qiwi.comDefault server name or IP address for connections to.
Number Default 443Default server port for connections to.
String Default utf-8Charset which will be used by client while sending requests.
Description will be added.
name Stringvalue StringSets HTTP header with pointed name and value for subsequent requests.
name StringRemoves header with pointed name.
publicKey Buffer | Stringcallback Function | nullEstablishes new encrypted sesssion.
You need to specify publicKey which currently is the same for all clients and can be loaded from ./qiwi.pub. This function generates symmetric key for AES-256, encrypts it using publicKey and sends to the server. Session object will be passed to callback. In order to make other calls you should install session into client using setSession.
The schema described above is similar to SSL in general states.
session ObjectSets session object for subsequent requests.
Removes stored session from client.
name Stringvalue Number | String | Boolean | nullSets extra field with name and value to be sent to the server on each request.
name StringRemoves field identified by name.
token StringterminalId String | undefinedSets token and terminalId for subsequent requests.
Removes previously stored token and terminal ID.
FAQs
Client for QIWI
We found that qiwi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.