
Security News
AI Has Taken Over Open Source
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain
A 1-1 end-to-end encrypted internet pipe powered by Hyperswarm, Noise & Bitcoin
npm install git+https://github.com/samooth/bitbeam
const BitBeam = require('bitbeam')
// Alice Private Key
const fromPrivKey = bsv.PrivKey.fromString("L1H2Zz694soUr9T3y...")
// Bob Public Key
const toPubKey = bsv.PubKey.fromString("03516b6b5a609b35f22bdfc62...");
// key is 32-byte unique passphrase to find the other side of your pipe.
// once the other peer is discovered it is used to derive a noise keypair as well.
// bitbeam uses ECDH to generate the unique passphrase when
// from: and to: are specified in the options object, being,
// from: the Bitcoin Private Key of Alice and
// to: the Bitcoin Public Key of Bob
const beam = new BitBeam({from: fromPrivKey ,to: toPubKey})
// to generate a random passphrase, leave the constructor empty and bitbeam will generate one for you
// const beam = new BitBeam()
// beam.key // <-- your passphrase
// make a little chat app
process.stdin.pipe(beam).pipe(process.stdout)
First install it
npm install -g git+https://github.com/samooth/bitbeam
Then on one machine run
echo 'hello world' | bitbeam
This will generate a phrase, eg "neznr3z3j44l7q7sgynbzpdrdlpausurbpcmqvwupmuoidolbopa". Then on another machine run
# will print "hello world"
bitbeam neznr3z3j44l7q7sgynbzpdrdlpausurbpcmqvwupmuoidolbopa
That's it! Happy piping.
const stream = new BitBeam([key][, options])Make a new BitBeam duplex stream.
Will auto connect to another peer using the same key with an end to end encrypted tunnel.
When the other peer writes it's emitted as data on this stream.
Likewise when you write to this stream it's emitted as data on the other peers stream.
If you do not pass a key into the constructor (the passphrase), one will be generated and put on stream.key.
options include:
dht: A DHT instance. Defaults to a new instance.stream.keyThe passphrase used by the stream for connection.
MIT
FAQs
A 1-1 end-to-end encrypted internet pipe powered by Hyperswarm
The npm package bitbeam receives a total of 1 weekly downloads. As such, bitbeam popularity was classified as not popular.
We found that bitbeam demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain

Security News
npm invalidated all granular access tokens that bypass 2FA after a fresh Mini Shai-Hulud wave compromised 323 npm packages. Staged publishing also entered public preview.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.