Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
twitterraffle
Advanced tools
A tool that allows you to run a raffle on twitter, asking the user who won to follow another user.
A tool that allows you to run a raffle on twitter, asking the user who won to follow another user.
This is a community project, free and open source. Everyone is invited to contribute, fork, share and use the code.
npm install -g twitterraffle
Create a credentials file named .twitter_credentials.json
inside your home dir:
{
"consumer_key": "xxx",
"consumer_secret": "xxx",
"access_token_key": "xxx",
"access_token_secret": "xxx"
}
To create this file you have to create a twitter application. Go to apps.twitter.com and do it. It is really simple.
Usage:
twitterraffle <query> <user>
twitterraffle -h | --help | --version
Set then environment variable DEBUG
to twitter
and you will see debug info.
Make sure the lint passes and the code works.
Contributors can be found at the contributors page on Github.
Twitter is the best option.
This software is open source, licensed under the Apache License, Version 2.0. See LICENSE.txt for details. Check out the terms of the license before you contribute, fork, copy or do anything with the code. If you decide to contribute you agree to grant copyright of all your contribution to this project, and agree to mention clearly if do not agree to these terms. Your work will be licensed with the project at Apache V2, along the rest of the code.
FAQs
A tool that allows you to run a raffle on twitter, asking the user who won to follow another user.
The npm package twitterraffle receives a total of 2 weekly downloads. As such, twitterraffle popularity was classified as not popular.
We found that twitterraffle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.