
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
http-proxy-agent
Advanced tools
http.Agent implementation for HTTPThis module provides an http.Agent implementation that connects to a specified
HTTP or HTTPS proxy server, and can be used with the built-in http module.
Note: For HTTP proxy usage with the https module, check out
https-proxy-agent.
import * as http from 'http';
import { HttpProxyAgent } from 'http-proxy-agent';
const agent = new HttpProxyAgent('http://168.63.76.32:3128');
http.get('http://nodejs.org/api/', { agent }, (res) => {
console.log('"response" event!', res.headers);
res.pipe(process.stdout);
});
The HttpProxyAgent class implements an http.Agent subclass that connects
to the specified "HTTP(s) proxy server" in order to proxy HTTP requests.
The proxy argument is the URL for the proxy server.
The options argument accepts the usual http.Agent constructor options, and
some additional properties:
headers - Object containing additional headers to send to the proxy server
in each request. This may also be a function that returns a headers object.
NOTE: If your proxy does not strip these headers from the request, they will also be sent to the destination server.
The https-proxy-agent package provides similar functionality to http-proxy-agent but is specifically designed for HTTPS connections. It allows you to tunnel HTTPS requests through an HTTP proxy.
The socks-proxy-agent package is similar to http-proxy-agent but supports SOCKS proxy servers. It can be used to connect through SOCKS4, SOCKS4A, or SOCKS5 proxies.
The proxy-agent package is a more general solution that supports multiple proxy protocols including HTTP, HTTPS, and SOCKS. It can automatically determine the correct agent to use based on the given proxy URL.
FAQs
An HTTP(s) proxy `http.Agent` implementation for HTTP
The npm package http-proxy-agent receives a total of 36,007,900 weekly downloads. As such, http-proxy-agent popularity was classified as popular.
We found that http-proxy-agent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.