Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
nonebot-plugin-resolver
Advanced tools
适用于NoneBot2的解析视频、图片链接/小程序插件,tiktok、bilibili、twitter等实时发送!
nb plugin install nonebot-plugin-resolver
pip install --upgrade nonebot-plugin-resolver
nb run
那个目录执行即可curl -fsSL https://raw.gitmirror.com/zhiyu1998/nonebot-plugin-resolver/master/npr_install.sh > npr_install.sh && chmod 755 npr_install.sh && ./npr_install.sh
# ubuntu
sudo apt-get install ffmpeg
# 其他linux参考(群友推荐):https://gitee.com/baihu433/ffmpeg
# Windows 参考:https://www.jianshu.com/p/5015a477de3c
[!IMPORTANT] 推荐两个ffmpeg全编译版本:
TikTok
&YouTube
解析必要依赖 不建议直接使用apt
不是最新版pip install yt-dlp
在 nonebot2 项目的.env
文件中添加下表中的可选配置
XHS_CK='' #xhs cookie
DOUYIN_CK='' # douyin's cookie, 格式:odin_tt=xxx;passport_fe_beating_status=xxx;sid_guard=xxx;uid_tt=xxx;uid_tt_ss=xxx;sid_tt=xxx;sessionid=xxx;sessionid_ss=xxx;sid_ucp_v1=xxx;ssid_ucp_v1=xxx;passport_assist_user=xxx;ttwid=xxx;
IS_OVERSEA=False # 是否是海外服务器部署
RESOLVER_PROXY = "http://127.0.0.1:7890" # 代理
R_GLOBAL_NICKNAME="" # 解析前缀名
BILI_SESSDATA='' # bilibili sessdata 填写后可附加: 总结等功能
VIDEO_DURATION_MAXIMUM=480 # 视频最大解析长度,默认480s为8分钟,计算公式为480s/60s=8mins
GLOBAL_RESOLVE_CONTROLLER="" # 全局禁止的解析,示例 GLOBAL_RESOLVE_CONTROLLER="bilibili,dy" 表示禁止了哔哩哔哩和抖,GLOBAL_RESOLVE_CONTROLLER=""说明都不禁止,(大部分是缩写)请严格遵守选项: bilibili,dy,tiktok,ac,twitter,xiaohongshu,youtube.netease,kugou,wb
使用以下命令可以控制对当前群是否开启/关闭解析:
@机器人 开启解析
@机器人 关闭解析
查看关闭解析
由群友
@麦满分
提供
https://github.com/user-attachments/assets/7ead6d62-a36c-4e8d-bb5d-6666749dfb26
yt-dlp
测试,确定后将 youtube 的 cookies 以 Netscape 的格式导出为 ytb_cookies.txt
,放到 nonebot 工作目录发版 Action:
git tag <tag_name>
git push origin --tags
同时感谢以下开发者对 Nonebot - R插件
作出的贡献:
FAQs
NoneBot2链接分享解析器插件。解析视频、图片链接/小程序插件,tiktok、bilibili、twitter等实时发送!
We found that nonebot-plugin-resolver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.