Lotuszn/piggyhand-fish

A narrow Android automation utility: it saves a Xianyu seller from repeatedly tapping through daily tasks, sign-ins and polish actions, but only on a rooted, LSPosed-equipped phone running one specific app version.

The problem

A Xianyu seller who wants to collect the app's daily rewards has to open the app, walk through the task list one item at a time, claim each reward, sign in, polish listings and occasionally place treasure-hunt bids. The work is repetitive and easy to skip. After installing this module, the phone does the same requests from inside the Xianyu process when the app starts, so the user only checks the report afterwards. The saved effort is the tapping, not a change in what the account earns.

What's different

Instead of simulating taps or capturing traffic on a PC, the module hooks into the Xianyu process and borrows the app's own MTOP protocol stack. It obtains a sender through the app's service registry and issues the documented interfaces directly, so the app itself handles login state, signatures and WUA. That is why browsing tasks can be completed by reporting recommendation IDs from nextfresh without opening product pages, and why no capture proxy or device-spoofing setup is needed.

The trade-off is tight coupling to one app build. The README names Xianyu 7.25.31, and every endpoint is a private API that Alibaba can change at any time, so any app update can break the task chain silently or partially. There is also a JSON rule engine with return_true/invoke/log actions and a reconnaissance mode that logs target-APK methods, which is useful for researching hooks but assumes the reader is comfortable with Xposed and reverse engineering. Reports come back through a notification, a local socket on port 27715, a broadcast and a log file, so results are visible but not neatly summarized. The README's success table reflects the author's testing, not an independent audit.

Who should try it

Good fit: a developer or tinkerer with a spare rooted Android phone who already runs LSPosed, wants to study how Xianyu's MTOP interfaces work, and accepts that a module tied to one app version may stop working after an update. A seller who simply wants reliable daily rewards may find the setup and the version pin more trouble than the tapping it replaces.

Poor fit: anyone unwilling to root or install LSPosed, anyone on an unlisted Xianyu version, and anyone treating this as a production-grade account tool. Using automation on a platform may also conflict with its terms; the README carries the author's own study-only disclaimer, and the consequences are on the user.

Requirements and limitations

You need an Android device with LSPosed (Xposed) installed, the Xianyu app in the module's scope, and a forced stop plus relaunch for injection. The supported app version is 7.25.31; the README gives no broader compatibility list. Building from source is deliberately manual: javac, D8 from a separately supplied R8 jar, aapt2 and apksigner, with ANDROID_JAR, BUILD_TOOLS and R8_JAR passed as environment variables. The bundled Gradle files are only a skeleton, so Android Studio users must swap stubs for the Xposed API dependency.

Ongoing upkeep is the bigger cost: every Xianyu update can move endpoints or change the protocol stack, and the default four-hour batch runs whenever the app launches, so the user must keep an eye on whether reports still show successful task chains rather than assuming they do.

HotRepo's take

HotRepo has only one dated observation: 94 total stars and #25 on the NEW-REPOSITORY board for Java on 2026-10-24. That is a single snapshot from a nine-day-old repository, not a growth series, so persistence cannot be judged. Before investing time, check the pinned Xianyu version against your installed app and whether your device already has LSPosed ready; the project instructions are the only compatibility reference.