
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
DevNS is a lightweight local DNS server for development purposes, it listens on UDP port 53 (configurable) and answers DNS queries by resolving them via Node's built-in dns module, with support for local hosts file overrides.
DevNS is developed by AI. Also a Tinkink project.
npm install -g devns
npm install devns
git clone <repository-url>
cd dns-server
npm install
npm run build
devns [options]
Options:
-p, --port <port> UDP port to listen on (default: 53)
-H, --host <host> Host/IP to bind (default: 0.0.0.0)
--ttl <seconds> TTL for synthesized answers (default: 300)
-h, --help Show help
# Start server on port 1053 (no sudo required)
npx devns --port 1053
# Or if installed globally
devns --port 1053
Test with dig:
dig @127.0.0.1 -p 1053 example.com A
dig @127.0.0.1 -p 1053 google.com AAAA
# Start server on standard DNS port (requires sudo)
sudo devns --host 0.0.0.0 --port 53
devns --host 127.0.0.1 --port 5353 --ttl 600
If you're working on the source code:
# Install dependencies
npm install
# Run in development mode (auto-reload on changes)
npm run dev -- --port 1053
# Build for production
npm run build
# Run built version
npm start -- --port 1053
The server supports the following DNS query types:
The server automatically reads and watches your system's hosts file:
/etc/hostsC:/Windows/System32/drivers/etc/hostsAny entries in the hosts file will override external DNS resolution. The server watches for changes and reloads the hosts file automatically.
MIT
Contributions are welcome! Please feel free to submit a Pull Request.
FAQs
Lightweight UDP DNS resolver proxy using Node.js built-in dns and dns-packet
We found that devns demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.