
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
cyberchef-node
Advanced tools
The Cyber Swiss Army Knife for encryption, encoding, compression and data analysis.
CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR and Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression and decompression of data, calculating hashes and checksums, IPv6 and X.509 parsing, changing character encodings, and much more.
The tool is designed to enable both technical and non-technical analysts to manipulate data in complex ways without having to deal with complex tools or algorithms. It was conceived, designed, built and incrementally improved by an analyst in their 10% innovation time over several years.
NOTE: The standard cyberchef library has a npm installable version that technically allows for the same thing as this project, and this is a mimic of that project, but with one key difference... We removed grunt, simplfied it to a commonjs module, and made it combatable with multiple node version, to be more easily installed using npm. If you've ever had an issue with the standard cyberchef library, this is the project for you.
npm install --save cyberchef-node
CyberChef is built to fully support Node.js v18. For more information, see the Node API page in the project wiki pages
CyberChef is released under the Apache 2.0 Licence and is covered by Crown Copyright.
FAQs
The Cyber Swiss Army Knife for encryption, encoding, compression and data analysis.
We found that cyberchef-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.