
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
🔍 📼 Youtube Search as a service
SuchTube is a server and a CLI app to search videos on YouTube.
The server responds to multiple formats and even comes with Slack integration and Discord integration:
html at GET /search.html?q=catsjson at GET /search.json?q=catstext at GET /search.text?q=catsslack at POST /search.slack + Slack payloaddiscord at POST /search.discord + Discord interaction payloadThe CLI allows you to search videos without leaving the terminal:
> suchtube funny cats
> suchtube football top goals --random --open
> suchtube trending videos --duration=short
> suchtube documentary --duration=long --random
> suchtube javascript tutorials --all
Or start the server:
> suchtube --server
You can also use the search functionality as a library.
SUCHTUBE_YOUTUBE_DATA_API_V3.Via npm:
> npm install -g suchtube
> suchtube --help
Via GitHub:
cd into it.npm installnpm start to start the serverbin/suchtube -h to use the CLIThe server listens by default on port 3333, if you want to change this, you can do it via the PORT environment variable. If you're starting the server using the SuchTube CLI, you can also set the port by:
> suchtube --server --port 4444
Options while using the CLI are available in the following formats: --time=10 or --time 10. For the server, you should pass the options along with the query, inside the q paramater, ie: ?q=funny+cats+--time=10.
--time=10, -t=10Starts the video at the given time in seconds.
--random, -rReturns a random video taking into account the given topic.
--duration=short, -d=shortFilters videos by duration. Available values: any (default), short, medium, long.
--all, -aReturn all videos from the search.
--open, -o (CLI only)Opens the video in your browser.
--full, -f (CLI only)Displays full video's information. It corresponds to hit the /search.json endpoint against the server.
You can use the SuchTube search as a library:
import { search } from 'suchtube'
search('funny cats', { random: true, duration: 'short' }).then(video => {
console.log(video.title)
console.log(video.link)
console.log(video.publishedAt)
})
/suchtube funny cats --random
To integrate SuchTube in your Slack workspace, read the following guides: https://api.slack.com/slash-commands.
Basically, you should run the server, make it publicly available (via URL or IP) and create a custom Slash Command pointing to your instance URL.
/suchtube query:funny cats --random
To integrate SuchTube in your Discord server, read the following guides: https://discord.com/developers/docs/interactions/application-commands.
You need to:
suchtubequery for the search terms/search.discordThe Discord integration responds with the video link in the channel where the command was used.
Any kind of idea, suggestion or bug report are really welcome! Just fork the repo, make your hack and send a pull request.
Thanks to all contributors, you rock 🙌
Start the server in development mode (nodemon + debugging):
> npm run dev
Run tests:
> npm test
Copyright (c) Marc Anguera Insa. SuchTube is released under the MIT License.
FAQs
YouTube search as a service, with Slack and Discord integration and CLI
The npm package suchtube receives a total of 9 weekly downloads. As such, suchtube popularity was classified as not popular.
We found that suchtube demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.