
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A module for sending unlimited texts for free
Taken mostly from typpo's textbelt, with a few improvements and lighter system, this module allows you to send texts through Node.js for free.
You must have sendmail (not the Node module, the native binary) installed.
Then just npm install this package:
npm install textbelt
Include it in your project:
var text = require('textbelt');
text.sendText("555-555-5555", "Textbelt says hello");
Sends message as a text to phone. cb is an optional callback function,
and opts is an optional object filled with options. If you want to include a
callback function, you must include an opts parameter as well (it can be
empty).
Possible opts:
var opts = {
fromAddr: 'some@email.com', // "from" address in received text
fromName: 'joe smith', // "from" name in received text
region: 'us', // region the receiving number is in: 'us', 'canada', 'intl'
subject: 'something' // subject of the message
}
Do not include +1 or other codes in the phone number. Instead use the 'region'
parameter.
If enable is true, enables debugging output, which is disabled by default.
Most, if not all, service providers have an email endpoint. When you send an
email to the endpoint, the phone number receives a text. For example, sending an
email to 1234567890@txt.att.net will result in (123)456-7890 receving your
email as a text.
This package just sends emails to all the providers in the region, hoping one will be correct :)
FAQs
Send unlimited, free texts with Node.js
We found that textbelt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.