
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A NodeJS API for HAProxy. Thsi can be used to expose a REST API or to control haproxy from Javascript.
var HAApi= require('ha-api'),
haapi = new HAApi({
socket: {
host : 'haproxy.address',
port : 1234
},
apiPort : 1111
})
HAProxy must open its configuration socket. This is done in the haproxy.cfg file using the followinf syntax:
TCP socket
stats socket ipv4@0.0.0.0:1234 level admin
Local domain UNIX socket
stats socket /tmp/haproxy.sock level admin
socket : HAProxy socket information. It can be either a TCP socket { host : 'haproxy.address', port : 1234 } or a UNIX local socket : { socket : '/tmp/haproxy.sock' }
app : optional express() instance. If provided, API methods will be added to this isntance. If not, a new express() will be created.
apiPort : TCP port to expose the REST API.
REST
GET /info
Javascript
haapi.info(callback);
REST
GET /stats
Javascript
haapi.stats(callback);
Returns a JSON formatted view of HAProxy stats
REST
GET /frontend/[frontend name]/disable
GET /frontend/[frontend name]/enable
Javascript
haapi.frontend('name').disable(callback);
REST
GET /backend/[backend name]/server/[server name]/disable
GET /backend/[backend name]/server/[server name]/enable
Javascript
haapi.backend('name').server('name').disable(callback);
haapi.backend('name').server('name').enable(callback);
FAQs
HAProxy remote controller
We found that ha-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.