Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
✨ A Python wrapper for the Nexo Pro API ✨
Nexo is a crypto lending platform that lets you borrow crypto or cash by placing your crypto as collateral. They offer high APY on holdings based on loyalty tier (the more Nexo token you hold the higher your tier). You can earn your interests in the same kind of your holding or as Nexo tokens. As an example, stablecoins can earn up to 12% APY. Bitcoin and Ethereum, 8%.
Unfortunately, Nexo doesn't offer some automated way of buying periodically. All you can do is setup a bank transfer and then convert/buy manually. This API Wrapper aims to offer a way of automating your purchases. You'd just have to setup your periodic bank transfer to Nexo, and then buy at spot price the coins that you want in an automated way by using the wrapped API calls.
This is an unofficial Python wrapper for the Nexo Pro exchange REST API v1. I am in no way affiliated with Nexo, use at your own risk.
If you came here looking for the Nexo exchange to purchase cryptocurrencies, then go to the official Nexo website. If you want to automate interactions with Nexo, stick around.
Click here to register a Nexo account
Heavily influenced by python-binance
You can check which endpoints are currently functional here
See it on Issue https://github.com/guilyx/python-nexo/issues/2 Checkout the Changelog
Priviledge Async Client. The advantage of async processing is that we don’t need to block on I/O which is every action that we make when we interact with the Nexo Pro servers.
By not blocking execution we can continue processing data while we wait for responses or new data from websockets.
python3 -m pip install python-nexo
#### Sync
import nexo
import os
from dotenv import load_dotenv
# Loads your API keys from the .env file you created
load_dotenv()
key = os.getenv("NEXO_PUBLIC_KEY")
secret = os.getenv("NEXO_SECRET_KEY")
# Instantiate Client and grab account balances
c = nexo.Client(key, secret)
balances = c.get_account_balances()
print(balances)
#### Async
import nexo
import os
import asyncio
from dotenv import load_dotenv
load_dotenv()
key = os.getenv("NEXO_PUBLIC_KEY")
secret = os.getenv("NEXO_SECRET_KEY")
async def main():
client = await nexo.AsyncClient.create(key, secret)
print(await client.get_account_balances())
await client.close_connection()
if __name__ == "__main__":
loop = asyncio.get_event_loop()
loop.run_until_complete(main())
git clone -b master https://github.com/guilyx/python-nexo.git
cd python-nexo
.env.example
and name it .env
docker-compose -f docker/docker-compose.yml up
- The container should keep running so that you can explore the APIdocker exec -it $(docker ps -qf "name=docker_python-nexo") /bin/bash
python3
import nexo
import os
nexo_key = os.getenv("NEXO_PUBLIC_KEY")
nexo_secret = os.getenv("NEXO_SECRET_KEY")
assert(nexo_key)
assert(nexo_secret)
c = nexo.Client(nexo_key, nexo_secret)
balances = c.get_account_balances()
print(balances)
Open an issue to state clearly the contribution you want to make. Upon aproval send in a PR with the Issue referenced. (Implement Issue #No / Fix Issue #No).
ERC-20 / EVM: 0xcC1C1E8F5fD3c832d970C8d5A62Ff9dD74259B1f
BTC: bc1q0c45w3jvlwclvuv9axlwq4sfu2kqy4w9xx225j
DOT: 1Nt7G2igCuvYrfuD2Y3mCkFaU4iLS9AZytyVgZ5VBUKktjX
DAG: DAG7rGLbD71VrU6nWPrepdzcyRS6rFVvfWjwRKg5
LUNC: terra12n3xscq5efr7mfd6pk5ehtlsgmaazlezhypa7g
FAQs
Nexo Pro REST API python implementation
We found that python-nexo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.