
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
flarepipe-client
Advanced tools
HTTP tunnel client for exposing local servers through Cloudflare Workers. Allows you to make your local development servers accessible from the internet via a public URL.
npm install -g flarepipe-client
Or run directly with npx:
npx flarepipe-client --host myhost.myname.workers.dev --forward 3000:/api
ft --host myhost.myname.workers.dev --auth secret123 --forward 3000:/api
This will forward all requests from https://myhost.myname.workers.dev/api/* to http://localhost:3000/api/*
ft --host myhost.myname.workers.dev --auth secret123 --prefix tunnel --forward 3000:/api
This uses server API endpoints like /tunnel/register instead of /register to avoid conflicts with your application routes.
ft --host myhost.myname.workers.dev --auth secret123 \
--forward 3000:/api \
--forward 8080:/admin \
--forward 5000:/websocket
ft --host myhost.myname.workers.dev --auth secret123 --forward 3000
This forwards all requests from https://myhost.myname.workers.dev/* to http://localhost:3000/*
ft --config tunnel.yaml
ft --host myhost.myname.workers.dev --auth secret123 \
--forward 3000:/api \
--forward 8080 \
--prefix tunnel \
--concurrency 32 \
--local-host 127.0.0.1 \
--open
| Option | Alias | Description | Required |
|---|---|---|---|
--host | -h | Upstream server providing forwarding | ✅ |
--auth | -a | Authentication key for server access | ✅ |
--forward | -f | Port forwarding rule: PORT:PATH or PORT for root | ✅ |
--concurrency | -c | Max concurrent requests (default: 16) | ❌ |
--local-host | -l | Tunnel traffic to this host instead of localhost | ❌ |
--prefix | -p | API prefix path on server (default: empty) | ❌ |
--config | Load configuration from YAML file | ❌ | |
--open | -o | Opens the tunnel URL in your browser | ❌ |
--help | Show help and exit | ❌ | |
--version | Show version number | ❌ |
--forward 3000 - Forward root path to port 3000--forward 3000:/api - Forward /api/* to port 3000--forward 8080:/admin - Forward /admin/* to port 8080--forward 5000:/websocket - Forward /websocket/* to port 5000You can specify multiple --forward rules to handle different paths.
The --prefix option allows you to specify a custom path prefix for server API endpoints. This is useful when your server routes might conflict with the tunnel's internal API routes.
/register, /poll, etc./{prefix}/register, /{prefix}/poll, etc.# No prefix (default)
ft --host worker.dev --auth key123 --forward 3000
# Server uses: /register, /poll, /response
# With prefix
ft --host worker.dev --auth key123 --prefix tunnel --forward 3000
# Server uses: /tunnel/register, /tunnel/poll, /tunnel/response
# Nested prefix
ft --host worker.dev --auth key123 --prefix api/v1 --forward 3000
# Server uses: /api/v1/register, /api/v1/poll, /api/v1/response
Use a prefix when:
/register, /poll, /responseYou can use a YAML configuration file to specify all settings. CLI arguments will override config file values.
host: myhost.myname.workers.dev
auth: secret-key-123
prefix: tunnel
forward:
- "3000:/api"
- "8080:/admin"
- 5000 # Root path forwarding
concurrency: 32
localHost: 127.0.0.1
open: true
# Use config file only
ft --config config.yaml
# Override specific settings
ft --config config.yaml --concurrency 64 --open
# CLI args take priority over config file
ft --config config.yaml --auth different-key --prefix api --forward 9000:/test
Settings are applied in this order (highest to lowest priority):
Expose a React development server:
ft --host myhost.myname.workers.dev --auth secret123 --forward 3000 --open
Expose multiple services with different paths:
ft --host myhost.myname.workers.dev --auth secret123 \
--forward 3000:/api \
--forward 3001:/auth \
--forward 3002:/files \
--forward 8080:/admin
Increase concurrency for high-traffic applications:
ft --host myhost.myname.workers.dev --auth secret123 \
--forward 3000:/api \
--concurrency 64
When your app routes conflict with tunnel endpoints:
ft --host myhost.myname.workers.dev --auth secret123 \
--prefix tunnel \
--forward 3000:/api \
--forward 8080:/admin
For complex setups, use a config file:
# Create config.yaml
cat > config.yaml << EOF
host: myhost.myname.workers.dev
auth: secret-key-123
prefix: tunnel
forward:
- "3000:/api"
- "8080:/admin"
- "5000:/websocket"
- 9000 # Root catch-all
concurrency: 32
localHost: 127.0.0.1
open: true
EOF
# Run with config
ft --config config.yaml
tunnel, not /tunnel/)--concurrency for applications with many simultaneous requests--config are correct--forward 3000 (root) as a catch-all after specific pathsMIT
FAQs
HTTP tunnel client for exposing local servers through Cloudflare Workers
We found that flarepipe-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.