
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
This is the Hoss Agent for NodeJS/Browser. The Agent will capture your outbound calls to 3rd party API and let you know when things aren't working. Sign up at https://hoss.com for a free account.
This is the Hoss Agent for NodeJS/Browser. The Agent will capture your outbound calls to 3rd party API and let you know when things aren't working. Sign up at https://hoss.com for a free account.
$ npm i hoss
Put the following snippet of code, ideally at the top of your program:
ES2015 module import:
import hoss from 'hoss';
hoss(YOUR_API_KEY);
CommonJS module require:
const hoss = require('hoss');
hoss(YOUR_API_KEY);
AMD module require:
require(['hoss'], function (hoss) {
// ...
hoss(YOUR_API_KEY);
});
You also can use the agent in the browser by loading it via a script tag:
<!DOCTYPE html>
<html>
<head>
<script
src="https://cdn.hoss.com/latest/bundle.min.js"
crossorigin="anonymous"
></script>
<script>
// Property in the window object
window.hoss(YOUR_API_KEY);
</script>
</head>
</html>
| Option | Type | Description | Default |
|---|---|---|---|
hossServerURL | String | Hoss Server | |
hossEventApiPath | String | Hoss server path | |
hossApiURL | String | Hoss API Url | |
remoteConfigEnabled | Boolean | Enable or disable remote configuration fetching | true |
remoteConfigInterval | Integer | Time interval in milliseconds to fetch remote configuration | 300000 |
FAQs
This is the Hoss Agent for NodeJS/Browser. The Agent will capture your outbound calls to 3rd party API and let you know when things aren't working. Sign up at https://hoss.com for a free account.
The npm package hoss receives a total of 1 weekly downloads. As such, hoss popularity was classified as not popular.
We found that hoss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.