
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Easy and lightweight client for Yandex.Money payment system.
The library has following important features:
Additionally yamoney has a set of samples which covers almost all API calls.
You can play with API from console as much as you want before real use!
$ npm install yamoney
YaMoney = require('yamoney')
client = new YaMoney.Client(token: obtainSomeToken())
client.accountInfo((error, info) ->
unless error?
console.log('Your account details:')
console.log(info)
else
console.log('Something went wrong:')
console.log(error)
return
)
This class represents client for Yandex.Money.
options ObjectConstructor for the class.
For now options can contain following keys:
host String: Host name or IP address for connections to. Defaults to money.yandex.ruport Number: Port for connections to. Defaults to 443charset String: Charset to be used for requests. Defaults to utf-8token String: Access token provided by Yandex.MoneyIf one of host, port or charset is missed then default value will be used. If token is missed then null will be stored in the internal field. You will be able to set real token later by calling setToken.
name Stringvalue StringSets HTTP header with pointed name and value for subsequent requests.
name StringRemoves header with pointed name.
name Stringinput Object | nullcallback Function | nullGeneric method for accessing any API methods on remote side.
For now following values are defined for name by Yandex.Money API:
revokeaccount-infooperation-detailsoperation-historyrequest-paymentprocess-paymentHowever you can pass any string instead of defined above. It can be usefull for future versions of API.
token StringSets token for subsequent requests. Token can also be passed to constructor in options hash.
Removes previously stored token.
callback Function | nullRevokes token which currently in use by client.
callback Function | nullReturns information about account current token was obtained for.
id Stringcallback Function | nullReturns details of operation identified by id.
selector Objectcallback Function | nullReturns operations history optionally filtered by selector.
options Objectcallback Function | nullMakes initial request for payment. This method is the first expected for any payment.
options Objectcallback Function | nullFinalize payment required by requestPayment. This method is the second expected for any payment.
For all methods described above you can find more information at http://api.yandex.ru/money/
If you have discovered any bug please feel free to contact with me. I will do all my best to fix it in shortest time.
Currently code has following problematic pieces:
This means that yamoney expects full compliance of server behaviour with specification.
FAQs
Client library for Yandex.Money
We found that yamoney demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.