
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Unofficial Facebook Chat API for Python
fbapy is a Python version of the Node.js package @xaviabot/fca-unofficial. It is based on the forked deprecated version fca-unoffical, which itself is a fork of the deprecated version facebook-chat-api.
fbapy acknowledges the contributions of the original authors of facebook-chat-api, recognizes the efforts put into fca-unoffical, and explains that the Python version is based on the for @xaviabot/fca-unofficial.
fbapy is available on PyPI:
pip install fbapy
If you encounter an error like this:
ImportError: failed to find libmagic. Check your installation
You need to install libmagic.
For Termux:
pkg install sox
For replit.com, open replit.nix
and add magic to the list of dependencies, for example:
{ pkgs }: {
deps = [
pkgs.python311Packages.magic
];
}
For Other Platforms, try installing python-magic-bin
:
pip install python-magic-bin==0.4.14
Using base64 encoded appstate from c3c-fbstate
from fbapy import *
client = Client()
api = client.login(
appstate="YOUR_BASE64_ENCODED_APP_STATE",
options={
"user_agent": "YOUR_USER_AGENT",
},
)
api.http.send_message(
msg="Hello World!",
thread_id="0000000000000000",
)
You can run test.py
to test the package. Install packages from requirements.txt + python-dotenv first.
pip install -r requirements.txt
pip install python-dotenv
Then create a .env
file in the root directory of the project and add the following:
APPSTATE="YOUR_BASE64_ENCODED_APP_STATE"
Then run test.py
:
python test.py
Open a chat with the appstate account, try sending ?ping1
/?ping2
, and you should get a reply pong
See DOCS.md for more information.
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
Unofficial Facebook Chat API for Python
We found that fbapy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.