
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
hsync is a reverse-proxy client for node.js and browsers that connects to an hsync-server.
You can share your local webserver as a secure public URL, as well as tunnel whatever tcp/ip traffic you'd like between two hsync clients.
npm i -g hsync
<script src="https://cdn.jsdelivr.net/npm/hsync/dist/hsync.min.js"></script>
this gives you a hsync global variable.
hsync
npx hsync
const hsyncCon = await hsync.dynamicConnect();
by default hsync will connect to the default hsync.tech server and allow a connection for up to 4 hours.
However you can pass flags to the command line or configure env variables:
| flag | long flag | type | env variable | description |
|---|---|---|---|---|
| -p | -port | number | PORT | port for local webserver |
| -d | --dynamic-host | url | HSYNC_DYNAMIC_HOST | host to get a dynamic connection from |
| -s | --hsync-server | url | HSYNC_SERVER | hsync-server location ex: https://sub.mydomain.com |
| -hs | --hsync-secret | string | HSYNC_SECRET | password to connect to hsync-server |
| -llp | --listener-local-port | number | HSYNC_LLP | local port to open for listener |
| -lth | --listener-target-host | url | HSYNC_LTH | target host for listener |
| -ltp | --listener-target-port | number | HSYNC_LTP | target port for listener |
| -rip | --relay-inbound-port | number | HSYNC_RIP | inbound port for remote relay requests |
| -rth | --relay-target-host | url | HSYNC_RTH | target host for relay to open tcp connection on |
| -rtp | --relay-target-port | number | HSYNC_RTP | target port for relay to open tcp connection on |
FAQs
client for hsync-server
The npm package hsync receives a total of 75 weekly downloads. As such, hsync popularity was classified as not popular.
We found that hsync demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.