
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
hyperbahn
Advanced tools
Service discovery and routing for large-scale microservice operations
#hyperbahn on FreenodeHyperbahn enables service discovery and routing for large-scale systems comprised of many microservices. Distributed, fault tolerant, and highly available, it lets one service find and communicate with others simply and reliably without having to know where those services run.
Hyperbahn is an overlay network of routers designed to support the TChannel RPC protocol. Hyperbahn itself is based on Ringpop. Its router nodes dynamically converge and gossip known services onto a consistent hash ring topology, forming a mesh of services that can send requests to each other without human intervention or knowledge of specific ports and addresses.
Hyperbahn and TChannel clients are currently supported in Go, Python, and Node.js.
Whether you're making your service available to others or you're a service consumer, Hyperbahn comes with many features to make application development easier:
Register a service on Hyperbahn in just three steps:
Or use a service over Hyperbahn in only two steps:
Hyperbahn is designed for large-scale microservice operations. However, you might want to develop and test (or just try it out) locally. To get started with Hyperbahn, set up a Hyperbahn cluster on your local machine.
git clone git@github.com:uber/hyperbahncd hyperbahn./hyperbahn-dev.shYou'll now have a two-node Hyperbahn cluster running. In one of the tmux windows, you should see the health checks of both nodes. Double check that the Hyperbahn cluster is healthy. If not, troubleshoot or report your issue.
To exit, run tmux kill-session -t hyperbahn in a seperate shell.
The open source quick start template for Node.js (below) will start a "Hello, world!" TChannel app in Node.js that registers with Hyperbahn.
npm install tchannel-gen --globalcd ~/projectstchannel-gen my-hyperbahn-app "A new hyperbahn app"cd my-hyperbahn-appnpm installmake starttcurl -p localhost:9000 my-service MyService::health_v1 -t ./thrift/service.thrifttcurl -p 127.0.0.1:21300 my-service MyService::health_v1 -t ./thrift/service.thriftYou can tcurl it directly at localhost:9000 or tcurl it through
Hyperbahn at 127.0.0.1:21300. If you're unfamiliar with tcurl, the
command-line tool to call TChannel servers, learn about it here.
Once a service is available on Hyperbahn, any other service on that Hyperbahn cluster can talk to it.
npm install hyperbahngit clone git@github.com:uber/hyperbahncd hyperbahnnpm installnpm testFAQs
Service Discovery and Routing
We found that hyperbahn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.