
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
scratch-websocket-api
Advanced tools
このライブラリは、Websocketを通じてScratch(またはTurbowarp)に接続し、そのクラウド変数を変更するために作成されました。
制作者: yosshi---
Python3が必須となります。Python2は使えないと思います。
pip install scratch-websocket-api websocket-client requests
websocket-clientとrequestsはこのライブラリで必要なのでインストールしてください。
Websocketを使用してサーバーに接続します
import scratch_api.scratch_ws_api as scratch3
conn = scratch3.login("USERNAME", "PASSWORD").connect(ProjectID, max_connections, isScratch)
USERNAME: (string) あなたのユーザー名
PASSWORD: (string) あなたのパスワード
ProjectID: (int) あなたのプロジェクトのID ( https://scratch.mit.edu/projects/{projectid} ) この部分がプロジェクトIDです
max_connections: (int) 最大同時送信数、この数の分、同時に変数を変更できます
isScratch: (boolean or string) TrueならScratch、FalseならTurbowarp、URLを入力すると特定のサーバーに接続できます。
conn.get(var_NAME)
var_NAME: list 取得するクラウド変数の名前(例: ["Sample1", "Sample2"]
)
戻り値: list 取得できなかった場合、Noneが返ります。 (例: [200, None]
conn.set(var_NAME, var_VALUE)
var_NAME: list 変更するクラウド変数の名前(例: ["Sample1", "Sample2"]
)
var_VALUE: list 変更する数値 (intまたはstr)(例: ["20", 1304]
)
import random
import scratch_api.scratch_ws_api as scratch3
conn = scratch3.login("yosshi---", "PASSWORD").connect(846708650, 2, True)
conn.send(["1", "2"], [random.randint(1, 10), random.randint(1, 10)])
print(conn.get(["1","2"]))
ランダムに変数を変更するだけの単純なプログラムです
FAQs
A API for scratch with websocket
We found that scratch-websocket-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.