
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
scotty-api-adapter
Advanced tools
This is a simple adapter for the Austrian OEBB Scotty (Hafas) Transport API. This is **unofficial** as there is no public documentation available for the original API.
This is a simple adapter for the Austrian OEBB Scotty (Hafas) Transport API. This is unofficial as there is no public documentation available for the original API.
Sulphire does not guarantee that this adapter will work in the future as the API is not officially supported. As of right now, our adapter is working for most routes. The official API structure is very outdated, please see the disclaimer below for more details.
The original API is using time based on IP address geolocation and does not return the time in the timezone of departure. It is also not possible to change the timezone at the moment. The time the API returns is a simple "hhmmss" string, same goes for the date. There is no timezone info.
You can use standalone methods to format the time appropriately and calculate delays. Please see below.
Other apps may be supported, but we have not tested them yet.
https://fahrplan.vmobil.at/bin/mgate.exe)npm install scotty-api-adapter
const ScottyAdapter = require('scotty-api-adapter');
const scotty = new scottyAdapter.ScottyAPI("https://fahrplan.vmobil.at/bin/mgate.exe")
const startLocationQuery = await scotty.getLocations("Bregenz Bahnhof")
const endLocationQuery = await scotty.getLocations("Hohenems Bahnhof")
const startLocation = startLocationQuery[0].name; // get the first result
const endLocation = endLocationQuery[0].name;
const date = new Date(); // get journeys for current time (this might sometimes throw an error if there are no journeys in the near future)
const journeys = await scotty.getTransportOptions(startLocation, endLocation, date)
// journeys is an array of Journey objects, see below for more info
General Info
real time object might be undefined, please use scheduled time if real time is undefinedA journey as returned by getTransportOptions. start and end's scheduled and real are objects with { hours, minutes, seconds} as integers. timeline is an array of Timeline objects. stopName is the name of the stop. platform is the platform number, if available. timelineHash is a hash of the timeline array, this is only used for internal duplicate checking.
{
"timeline": Timeline[],
"start": { scheduled, real, stopName, (platform) },
"end": { scheduled, real, stopName, (platform) },
"timelineHash": string,
}
This is the order of a journey. dep and arr times are objects with { hours, minutes, seconds } as integers. id is the Bus number or the train number. stopName is the name of the stop. platform is the platform number, if available.
A journey where you start in a Bus and have to switch to train or a different Bus would look like this:
JNY -> TNSF -> JNY
{
"type": "JNY" | "WALK" | "TNSF",
"dep": { scheduled, real, stopName, (platform) },
"arr": { scheduled, real, stopName, (platform) },
"id": string,
"mode": TransportMode
}[]
Transport mode as returned by the API. Type values are similar to "Bus" or "Train", depending on the source.
{
"type": string,
"num": string,
"admin": string,
}
Returns an array of locations matching the given name. The array is sorted by relevance, the first result is the most relevant one. The array is empty if no results were found.
const locations = await scotty.getLocations("Bregenz Bahnhof")
Returns an array of journeys. startLocation and endLocation are strings, date is a JavaScript Date object. Depending on the date and time, the API might not return any journeys. (Please read Disclaimer for time formats and zones) lang is the language of the response, default is "eng". raw is a boolean, if true, the raw response from the API is returned. Default is false.
const journeys = await scotty.getTransportOptions("Bregenz Bahnhof", "Hohenems Bahnhof", new Date())
Formats a time object from the API to a readable format (hh:mm:ss).
const time = { hours: 12, minutes: 30, seconds: 0 }
const formattedTime = scottyAdapter.formatTime(time) // 12:30:00
Calculates the difference between two time objects from the API. Returns an object with { hours, minutes, seconds } as integers. Useful for calculating the delays or the duration of a journey.
const time1 = { hours: 12, minutes: 30, seconds: 0 }
const time2 = { hours: 12, minutes: 45, seconds: 0 }
const timeDifference = scottyAdapter.calculateTimeDifference(time1, time2) // { hours: 0, minutes: 15, seconds: 0 }
FAQs
This is a simple adapter for the Austrian OEBB Scotty (Hafas) Transport API. This is **unofficial** as there is no public documentation available for the original API.
We found that scotty-api-adapter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.