
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A Node.js command-line application that serves static files from a local directory via HTTP and supports file uploads
A lightweight Node.js command-line application that serves static files from a local directory via HTTP, with support for file uploads and directory browsing.
npx httpoint
npx httpoint --port 8080 --path /path/to/directory
HTTPOINT_PORT=8080 HTTPOINT_ROOT=/var/www npx httpoint
# Command line arguments (take precedence)
npx httpoint --port 3000 --path ./public --debug --help
# Environment variables
HTTPOINT_PORT=3000
HTTPOINT_ROOT=./public
| Option | CLI Argument | Environment Variable | Default | Description |
|---|---|---|---|---|
| Port | --port <number> | HTTPOINT_PORT | 3000 | Port to listen on |
| Root Directory | --path <directory> | HTTPOINT_ROOT | Current directory | Root directory to serve |
| Debug Mode | --debug | N/A | false | Enable debug logging |
| Help | --help | N/A | N/A | Show help information |
Once running, the server will be available at:
http://localhost:<port>/http://<actual-ip-address>:<port>/The server automatically detects and displays your local IP address.
When accessing a directory, HTTPoint provides:
npm install -g httpoint
git clone <repository-url>
cd httpoint
npm install
node src/serve.js [options]
# Start server in one terminal
node src/serve.js --port 3000
# Test in another terminal
curl http://localhost:3000/
Denis Zimin
MIT © 2025
FAQs
A Node.js command-line application that serves static files from a local directory via HTTP and supports file uploads
We found that httpoint demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.