
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
http_bouncer_server
Advanced tools
Public service that 'rebroadcasts' http hits to any clients listening
Public service that 'rebroadcasts' http hits to any clients listening. (See: http_bouncer_client) There is no queuing or anything. Its only going to broadcasts to any clients that are connected at that time.
npm install http_bouncer_servernode node_modules/http_bouncer_server/index.jsheroku createheroku labs:enable websocketsgit push heroku masterFormat should be [server]/handler/[channelname]/[regular path]
Setting the scene:
This is just demonstrating how to test out. Normally your data would come from another source. Note the url, its sending data to the channelname of "gavin" and the path of "/handler/github?demo=1"
curl -d '{ "zen" : "981i34epoqwdu90ads", "hook_id": 12 }' "http://localhost:3000/handler/gavin/handler/github?demo=1" --header "Content-Type:application/json"
Note the "NOLISTENERS" response
We are going use the client to listen to the sample hit. We will talk to the server (-s) of http://localhost:3000/ and map the channel gavin to http://localhost/dev_application?query_string_to_merge=1
http_bouncer_client -s http://localhost:3000/ -c 'gavin:http://localhost/dev_application?query_string_to_merge=1'
This will make every hit to the "gavin" channel and url of "handler/github?demo=1" to hit "http://localhost/dev_application/handler/github?demo=1&query_string_to_merge=1" See: http_bouncer_client for more info.
0.0.2 - 2014-07-11
0.0.1 - 2014-06-17
Copyright (c) 2014 Gavin Mogan Licensed under the MIT license.
FAQs
Public service that 'rebroadcasts' http hits to any clients listening
We found that http_bouncer_server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.