Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
http.Agent
instanceThis module is a thin wrapper around the base http.Agent
class.
It provides an abstract class that must define a connect()
function,
which is responsible for creating the underlying socket that the HTTP
client requests will use.
The connect()
function may return an arbitrary Duplex
stream, or
another http.Agent
instance to delegate the request to, and may be
asynchronous (by defining an async
function).
Instances of this agent can be used with the http
and https
modules. To differentiate, the options parameter in the connect()
function includes a secureEndpoint
property, which can be checked
to determine what type of socket should be returned.
Here are some more interesting uses of agent-base
.
Send a pull request to list yours!
http-proxy-agent
: An HTTP(s) proxy http.Agent
implementation for HTTP endpointshttps-proxy-agent
: An HTTP(s) proxy http.Agent
implementation for HTTPS endpointspac-proxy-agent
: A PAC file proxy http.Agent
implementation for HTTP and HTTPSsocks-proxy-agent
: A SOCKS proxy http.Agent
implementation for HTTP and HTTPSHere's a minimal example that creates a new net.Socket
or tls.Socket
based on the secureEndpoint
property. This agent can be used with both
the http
and https
modules.
import * as net from 'net';
import * as tls from 'tls';
import * as http from 'http';
import { Agent } from 'agent-base';
class MyAgent extends Agent {
connect(req, opts) {
// `secureEndpoint` is true when using the "https" module
if (opts.secureEndpoint) {
return tls.connect(opts);
} else {
return net.connect(opts);
}
}
});
// Keep alive enabled means that `connect()` will only be
// invoked when a new connection needs to be created
const agent = new MyAgent({ keepAlive: true });
// Pass the `agent` option when creating the HTTP request
http.get('http://nodejs.org/api/', { agent }, (res) => {
console.log('"response" event!', res.headers);
res.pipe(process.stdout);
});
FAQs
Turn a function into an `http.Agent` instance
We found that agentbse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.