
Security News
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
@humanwhocodes/proxy-fetch-server
Advanced tools
A Node.js server that uses a proxy agent to make fetch requests
If you find this useful, please consider supporting my work with a donation.
A Node.js server that uses a proxy agent to make fetch requests. Built with Hono, this server accepts POST requests with URLs to fetch through a configurable proxy.
The intended use is as a serverless function.
npm install @humanwhocodes/proxy-fetch-server
You can start the server using npx:
npx @humanwhocodes/proxy-fetch-server
The server is configured using environment variables:
Example:
PROXY_URI=http://proxy.example.com:8080 \
PROXY_FETCH_KEY=my-secret-key \
PORT=3000 \
PROXY_TOKEN=proxy-secret \
PROXY_TOKEN_TYPE=Bearer \
npx @humanwhocodes/proxy-fetch-server
Send a POST request to the root endpoint (/) with:
Bearer <PROXY_FETCH_KEY> - Required only if PROXY_FETCH_KEY is configuredurl propertyExample using curl:
curl -X POST http://localhost:8080/ \
-H "Authorization: Bearer my-secret-key" \
-H "Content-Type: application/json" \
-d '{"url": "https://example.com"}'
The server will:
You can also use this package programmatically:
import { createApp } from "@humanwhocodes/proxy-fetch-server";
const app = createApp({
key: "my-secret-key",
proxyUri: "http://proxy.example.com:8080",
proxyToken: "proxy-secret",
proxyTokenType: "Bearer",
});
// Use with your preferred Node.js server adapter
Copyright 2025 Nicholas C. Zakas
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
A Node.js server that uses a proxy agent to make fetch requests
The npm package @humanwhocodes/proxy-fetch-server receives a total of 19 weekly downloads. As such, @humanwhocodes/proxy-fetch-server popularity was classified as not popular.
We found that @humanwhocodes/proxy-fetch-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.