
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@nexusvoid/security-sdk
Advanced tools
NexusVoid Security SDK for prompt analysis and vulnerability scanning
A TypeScript/JavaScript SDK for the NexusVoid Security API, providing prompt analysis and vulnerability scanning capabilities.
npm install @nexusvoid/security-sdk
import { NexusVoidClient } from '@nexusvoid/security-sdk';
// Initialize the client
const client = new NexusVoidClient({
apiKey: 'your-api-key-here',
baseUrl: 'https://api.nexusvoid.com', // Optional, defaults to production
});
// Analyze a prompt
try {
const result = await client.analyzePrompt('Your prompt text here');
console.log('Is safe:', result.is_safe);
console.log('Vulnerabilities found:', result.vulnerabilities_found);
console.log('Masked prompt:', result.masked_prompt);
// Process vulnerabilities
result.vulnerabilities.forEach(vuln => {
console.log(`${vuln.type}: ${vuln.value} (Risk: ${vuln.risk_factor}/10)`);
console.log(`Recommendation: ${vuln.recommendation}`);
});
} catch (error) {
console.error('Analysis failed:', error.message);
}
new NexusVoidClient(config: NexusVoidConfig)
Config Options:
apiKey (string, required): Your NexusVoid API keybaseUrl (string, optional): API base URL (default: 'https://api.nexusvoid.com')timeout (number, optional): Request timeout in milliseconds (default: 30000)retries (number, optional): Number of retry attempts (default: 3)Analyzes a prompt for security vulnerabilities and PII.
const result = await client.analyzePrompt('Your prompt text', {
timeout: 15000,
retries: 2
});
Parameters:
prompt (string): The prompt text to analyzeoptions (AnalysisOptions, optional):
timeout (number): Request timeout in millisecondsretries (number): Number of retry attemptsReturns: Promise<PromptAnalysisResult>
Checks the health status of the NexusVoid service.
const health = await client.healthCheck();
console.log('Service status:', health.status);
Returns: Promise<HealthCheckResult>
Returns the current client configuration.
const config = client.getConfig();
console.log('API Key:', config.apiKey);
Returns: NexusVoidConfig
Updates the API key.
client.setApiKey('new-api-key');
Updates the base URL.
client.setBaseUrl('https://staging-api.nexusvoid.com');
interface PromptAnalysisResult {
success: boolean;
timestamp: string;
original_prompt: string;
is_safe: boolean;
masked_prompt: string;
vulnerabilities_found: number;
vulnerabilities: Vulnerability[];
scan_details: {
total_findings: number;
risk_level: string;
};
metadata: {
processing_time_ms: number;
python_version: string;
nexus_guard_version: string;
};
}
interface Vulnerability {
type: string;
subtype: string;
risk_factor: number;
value: string;
recommendation: string;
start: number;
end: number;
}
The SDK provides specific error types for different scenarios:
import {
NexusVoidError,
AuthenticationError,
RateLimitError,
ValidationError,
ServiceError,
TimeoutError
} from '@nexusvoid/security-sdk';
try {
const result = await client.analyzePrompt('test');
} catch (error) {
if (error instanceof AuthenticationError) {
console.error('Invalid API key');
} else if (error instanceof RateLimitError) {
console.error('Rate limit exceeded');
} else if (error instanceof ValidationError) {
console.error('Invalid input:', error.message);
} else if (error instanceof TimeoutError) {
console.error('Request timed out');
} else if (error instanceof ServiceError) {
console.error('Service error:', error.message);
} else {
console.error('Unknown error:', error.message);
}
}
import { NexusVoidClient } from '@nexusvoid/security-sdk';
const client = new NexusVoidClient({
apiKey: process.env.NEXUSVOID_API_KEY!
});
// Analyze a prompt
const result = await client.analyzePrompt('My name is John Doe and my email is john@example.com');
if (!result.is_safe) {
console.log('⚠️ Prompt contains sensitive information');
console.log('Masked version:', result.masked_prompt);
result.vulnerabilities.forEach(vuln => {
console.log(`- ${vuln.type}: ${vuln.value}`);
});
} else {
console.log('✅ Prompt is safe to use');
}
import { NexusVoidClient } from '@nexusvoid/security-sdk';
const client = new NexusVoidClient({
apiKey: 'your-api-key',
baseUrl: 'https://staging-api.nexusvoid.com',
timeout: 60000,
retries: 5
});
// Check service health before analysis
const health = await client.healthCheck();
if (health.status !== 'healthy') {
throw new Error('Service is not healthy');
}
// Analyze with custom options
const result = await client.analyzePrompt('Your prompt', {
timeout: 30000,
retries: 2
});
import { NexusVoidClient } from '@nexusvoid/security-sdk';
const client = new NexusVoidClient({
apiKey: process.env.NEXUSVOID_API_KEY!
});
const prompts = [
'Hello world',
'My email is user@example.com',
'Please send money to account 123456789'
];
const results = await Promise.allSettled(
prompts.map(prompt => client.analyzePrompt(prompt))
);
results.forEach((result, index) => {
if (result.status === 'fulfilled') {
console.log(`Prompt ${index + 1}: ${result.value.is_safe ? 'Safe' : 'Unsafe'}`);
} else {
console.error(`Prompt ${index + 1} failed:`, result.reason.message);
}
});
npm run build
npm test
npm run lint
MIT
For support and questions, please visit our GitHub repository or contact us at support@nexusvoid.com.
FAQs
NexusVoid Security SDK for prompt analysis and vulnerability scanning
The npm package @nexusvoid/security-sdk receives a total of 0 weekly downloads. As such, @nexusvoid/security-sdk popularity was classified as not popular.
We found that @nexusvoid/security-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.