
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
boringtunjs
Advanced tools
A userspace WireGuard VPN implementation for NodeJS based on BoringTun
A userspace WireGuard VPN implementation for NodeJS based on BoringTun which is written in Rust.
This project is at the beginning of its journey. As such, it is currently in its initial development phase, where features are being developed and the architecture is being established.
Bindings for the BoringTun library are ready, but it does not include a network stack. The original library doesn't include it. It will be written on Nodejs.
npm install boringtunjs
Please note that this project is still in the development phase, and the API may change.
const { Wireguard } = require('boringtunjs')
new Wireguard({
privateKey: '3RLqvLwIYch6efW7iK7lywzFnZQfSzblDTvRwJ7CAbA=',
// publicKey: 'PhDFug7ZouGnrWuVFW9ez41OwEhgLNmyi9/CEnHRlFg=',
listenPort: 51820,
address: '10.8.0.1',
}).addPeer({
// privateKey: '/2iZCtOrderkA2hkuUy4E1q7Py9qIGiFytTd/ivXZ4E=',
publicKey: '3g5U/6myr9DZf/HkNuwSKR+h1lcOJQbnAQfjrZ4q5xg=',
keepAlive: 25,
allowedIPs: '10.8.0.2/32',
})
.listen()
This project makes use of "BoringTun", a userspace WireGuard VPN implementation, developed and maintained by Cloudflare, Inc. We extend our gratitude to Cloudflare, Inc. and the contributors to the BoringTun project for their work. BoringTun is distributed under the BSD 3-Clause License, and we adhere to its licensing conditions in the use of this library within our project.
You need Rust installed on your machine. The build process is divided into two steps: building the static library in Rust and creating the Node.js bindings in C++.
git clone --recursive git@github.com:boringjs/boringtun.js.git
cd boringtun.js
npm install
npm run build:boringtun
npm run build
The project is licensed under the 3-Clause BSD License.
FAQs
A userspace WireGuard VPN implementation for NodeJS based on BoringTun
The npm package boringtunjs receives a total of 5 weekly downloads. As such, boringtunjs popularity was classified as not popular.
We found that boringtunjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.