
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
@libp2p/mplex
Advanced tools
JavaScript implementation of mplex.
npm install @libp2p/mplex
import { Mplex } from '@libp2p/mplex'
import { pipe } from 'it-pipe'
const muxer = new Mplex({
onStream: stream => { // Receive a duplex stream from the remote
// ...receive data from the remote and optionally send data back
},
onStreamEnd: stream => {
// ...handle any tracking you may need of stream closures
}
})
pipe(conn, muxer, conn) // conn is duplex connection to another peer
const stream = muxer.newStream() // Create a new duplex stream to the remote
// Use the duplex stream to send some data to the remote...
pipe([1, 2, 3], stream)
const muxer = new Mplex([options])Create a new duplex stream that can be piped together with a connection in order to allow multiplexed communications.
e.g.
import { Mplex } from '@libp2p/mplex'
import { pipe } from 'it-pipe'
// Create a duplex muxer
const muxer = new Mplex()
// Use the muxer in a pipeline
pipe(conn, muxer, conn) // conn is duplex connection to another peer
options is an optional Object that may have the following properties:
onStream - A function called when receiving a new stream from the remote. e.g.
// Receive a new stream on the muxed connection
const onStream = stream => {
// Read from this stream and write back to it (echo server)
pipe(
stream,
source => (async function * () {
for await (const data of source) yield data
})(),
stream
)
}
const muxer = new Mplex({ onStream })
// ...
Note: The onStream function can be passed in place of the options object. i.e.
new Mplex(stream => { /* ... */ })
onStreamEnd - A function called when a stream ends
// Receive a notification when a stream ends
const onStreamEnd = stream => {
// Manage any tracking changes, etc
}
const muxer = new Mplex({ onStreamEnd })
// ...
signal - An AbortSignal which can be used to abort the muxer, including all of it's multiplexed connections. e.g.
const controller = new AbortController()
const muxer = new Mplex({ signal: controller.signal })
pipe(conn, muxer, conn)
controller.abort()
maxMsgSize - The maximum size in bytes the data field of multiplexed messages may contain (default 1MB)muxer.onStreamUse this property as an alternative to passing onStream as an option to the Mplex constructor.
muxer.onStreamEndUse this property as an alternative to passing onStreamEnd as an option to the Mplex constructor.
muxer.streamsReturns an Array of streams that are currently open. Closed streams will not be returned.
const stream = muxer.newStream([options])Initiate a new stream with the remote. Returns a duplex stream.
e.g.
// Create a new stream on the muxed connection
const stream = muxer.newStream()
// Use this new stream like any other duplex stream:
pipe([1, 2, 3], stream, consume)
In addition to sink and source properties, this stream also has the following API, that will normally not be used by stream consumers.
stream.close()Closes the stream for reading. If iterating over the source of this stream in a for await of loop, it will return (exit the loop) after any buffered data has been consumed.
This function is called automatically by the muxer when it receives a CLOSE message from the remote.
The source will return normally, the sink will continue to consume.
stream.abort([err])Closes the stream for reading and writing. This should be called when a local error has occurred.
Note, if called without an error any buffered data in the source can still be consumed and the stream will end normally.
This will cause a RESET message to be sent to the remote, unless the sink has already ended.
The sink will return and the source will throw if an error is passed or return normally if not.
stream.reset()Closes the stream immediately for reading and writing. This should be called when a remote error has occurred.
This function is called automatically by the muxer when it receives a RESET message from the remote.
The sink will return and the source will throw.
stream.timelineReturns an object with close and open times of the stream.
stream.idReturns a string with an identifier unique to this muxer. Identifiers are not unique across muxers.
The libp2p implementation in JavaScript is a work in progress. As such, there are a few things you can do right now to help out:
Licensed under either of
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
FAQs
JavaScript implementation of https://github.com/libp2p/mplex
The npm package @libp2p/mplex receives a total of 20,802 weekly downloads. As such, @libp2p/mplex popularity was classified as popular.
We found that @libp2p/mplex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.