
Product
Introducing Supply Chain Attack Campaigns Tracking in the Socket Dashboard
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.
blind-peer-cli
Advanced tools
CLI for running blind peers.
Install globally to use the blind-peer command:
npm install -g blind-peer-cli
Run a blind peer:
blind-peer
Or, to run on bare:
blind-peer-bare
--storage|-s [path] - Storage path, defaults to ./blind-peer--port|-p [int] - DHT Port to try to bind to. Only relevant when that port is not firewalled. (defaults to a random port)--trusted-peer|-t [trusted-peer] - Public key of a trusted peer (allowed to set announce: true). Can be specified multiple times.--debug|-d - Enable debug mode (more logs). Can be specified multiple times.--max-storage|-m [int] - Max storage usage, in Mb (defaults to 100000)--autodiscovery-rpc-key [autodiscovery-rpc-key] - Public key where the autodiscovery service is listening. When set, the autodiscovery-seed must also be set. Can be hex or z32.--autodiscovery-seed [autodiscovery-seed] - 64-byte seed used to authenticate to the autodiscovery service. Can be hex or z32.--autodiscovery-service-name [autodiscovery-service-name] - Name under which to register the service (default blind-peer)--scraper-public-key [scraper-public-key] - Public key of a dht-prometheus scraper. Can be hex or z32.--scraper-secret [scraper-secret] - Secret of the dht-prometheus scraper. Can be hex or z32.--scraper-alias [scraper-alias] - (optional) Alias with which to register to the scraperWhen started, ndjson (pino) will be emitted for events. An example startup will look like:
{"level":30,"time":1751662694931,"pid":96069,"hostname":"L293","msg":"Starting blind peer"}
{"level":30,"time":1751662694932,"pid":96069,"hostname":"L293","msg":"Using storage 'blind-peer'"}
{"level":30,"time":1751662696936,"pid":96069,"hostname":"L293","msg":"Blind peer listening, local address is 10.0.0.214:49741"}
{"level":30,"time":1751662696936,"pid":96069,"hostname":"L293","msg":"Bytes allocated: 0B of 100GB"}
{"level":30,"time":1751662696936,"pid":96069,"hostname":"L293","msg":"Listening at es4n7ty45odd1udfqyi9xz58mrbheuhdnxgdufsn9gz6e5uhsqco"}
{"level":30,"time":1751662696936,"pid":96069,"hostname":"L293","msg":"Encryption public key is ur7d9r7s3zf1ryibixt5139bep67y94s5bg4gckzo1p6qgtwwfyy"}
FAQs
CLI for blind-peer
The npm package blind-peer-cli receives a total of 21 weekly downloads. As such, blind-peer-cli popularity was classified as not popular.
We found that blind-peer-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Security News
Node.js 25.4.0 makes require(esm) stable, formalizing CommonJS and ESM compatibility across supported Node versions.