
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
github.com/nicolaspearson/gogo-cors-proxy
Advanced tools
A simple Go proxy which adds CORS headers to an incoming request. This allows your application to execute requests on a resource hosted on a different domain.
export GOROOT=/usr/local/go
export GOPATH=/dev/go
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin
| Flag | Default | Description |
|---|---|---|
target | localhost:8080 | host:port to proxy requests to |
listen | localhost:8181 | host:port to listen on |
protocol | http | protocol used by the target |
host | localhost:3000 | host header to be used for the proxy request |
origin | http://localhost:3000 | origin header to be used for the proxy request |
methods | true | enable / disable default access control methods |
debug | false | enable / disable debug messages |
Once Go has been correctly installed and configured, execute:
go run proxy.go -target=0.0.0.0:8080 -listen=0.0.0.0:8181 -host=localhost:3000 -origin=http://localhost:3000
Now all incoming requests on port 8181 will be proxied to http://0.0.0.0:8080
The Docker image is hosted on Docker Hub
Please see the docker-compose.yml file for an example of how the image may be used.
To build the docker image you can simply run: docker-compose up
Here are some basic rules to follow to ensure timely addition of your request:
develop branch. Any other branch (unless specified by the maintainers) will get rejected.MIT License
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.