
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
twitter.js
Advanced tools
An object-oriented Node.js and TypeScript library for interacting with Twitter API v2
A Node.js and TypeScript library for interacting with Twitter API v2
npm i twitter.js
🚀 Fetch details about a twitter user in no time:
import { Client } from 'twitter.js';
import { bearerToken } from './secrets.js';
const client = new Client();
await client.loginWithBearerToken(bearerToken);
const user = await client.users.fetchByUsername('iShiibi');
console.log(user.description); // Contributing to open-source 🌐
🔒 Make user-context authorized requests without any hassle:
import { Client } from 'twitter.js';
import { credentials } from './secrets.js';
const client = new Client();
await client.login(credentials);
const tweet = await client.tweets.fetch('1336749579228745728');
await tweet.like();
📈 Want real-time events listening? We got you covered:
import { Client } from 'twitter.js';
import { credentials } from './secrets.js';
const client = new Client({ events: ['FILTERED_TWEET_CREATE'] });
await client.login(credentials);
await client.filteredStreamRules.create({ value: '@tjs_test' });
client.on('filteredTweetCreate', async tweet => {
console.log(tweet.text); // hey @tjs_test, like this tweet if you're listening!
await tweet.like();
});
The twitter.js library is not ready for production use yet. You can expect breaking changes without any major version bump until we release v1.0.0 of the library.
FAQs
An object-oriented Node.js and TypeScript library for interacting with Twitter API v2
We found that twitter.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.