
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
tweet-location
Advanced tools
Returns a place object including latitude and longitude from a Twitter place ID
npm install tweet-location --save
var tweetLocation = require('tweet-location');
var credentials = require('./credentials'); // see below for template
tweetLocation('df51dec6f4ee2b2c', credentials, function(results){
console.log(results); // Do whatever with the results
});
Google Maps requires a latitude and longitude object which can be created from the center point of the polygon of coordinates returned, and then reversed and rounded.
To return a latitude and longitude object, simply specify the final optional parameter as true.
tweetLocation('5d838f7a011f4a2d', credentials, function(latLonObject){
// Send latLonObject to map!
console.log(latLonObject)
}, true);
You will need to register your application at https://apps.twitter.com/app/new Then copy and paste the following into a JSON object similar to that below. Ideally you should put this in a separate .gitignore'd file
module.exports = {
consumer_key : 'xxxxxxxxxxxxxxxxxxxxxxxxx',
consumer_secret : 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
token : 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
token_secret : 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
};
Twitter imposes a limit of 15 requests every 15 minutes. After this the Twitter API returns a single empty JSON object.
Run npm test
gulp build
- Lints and compiles CoffeeScriptgulp test
- Runs testsgulp
- Watches for changes, cleans working directory, builds and testsMIT � Alicia Sykes
FAQs
Returns a latitude and longitude from a Twitter place ID
The npm package tweet-location receives a total of 0 weekly downloads. As such, tweet-location popularity was classified as not popular.
We found that tweet-location demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.