
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
Tunnel your local HTTP(s) server to the world! Powered by Cloudflare Quick Tunnels.
A script create a tunnel to your localhost use Cloudflare Argo Tunnel
Globally run tunnel with npx:
npx ctun@latest --url http://localhost:3000
Use npx ctun --help for more usage info.

Install package:
# npm
npm install ctun
# yarn
yarn add ctun
# pnpm
pnpm install ctun
Import:
// ESM
import { startTunnel } from "ctun";
Start tunnel:
const tunnel = await startTunnel({ port: 3000 });
url{protocol}://{hostname}:{port}The local server URL to tunnel.
port3000The local server PORT (only effective if url is not provided).
hostnamelocalhostThe local server hostname (only effective if url is not provided).
protocolhttpThe local server protocol (only effective if url is not provided).
verifyTLSfalseVerify local server TLS certificate.
Cloudflared integration based on a fork of JacobLinCool/node-cloudflared
Your installation of cloudflared software constitutes a symbol of your signature indicating that you accept the terms of the Cloudflare License, Terms and Privacy Policy.
FAQs
Tunnel your local HTTP(s) server to the world! Powered by Cloudflare Quick Tunnels.
The npm package ctun receives a total of 4 weekly downloads. As such, ctun popularity was classified as not popular.
We found that ctun demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.