
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
控制台代理服务器工具,提供本地开发时的跨域代理功能。
npm install -g lsls
npm install lsls
工具会自动读取 ~/.local.json 配置文件,支持以下配置项:
{
"Cookie": "your-base64-encoded-cookie-string",
"secToken": "your-sec-token-value"
}
| 参数 | 简写 | 描述 | 默认值 |
|---|---|---|---|
--port | -p | 代理服务器端口 | 4099 |
--cookie | -c | 自定义 Cookie 值(需要 Base64 编码) | undefined |
--token | -t | slsaccesstoken 值 | undefined |
--sectoken | -s | 自定义 secToken 值 | undefined |
--debug | -d | 启用调试模式 | false |
# 使用默认端口 4099 启动代理服务器
lsls
# 指定端口
lsls -p 8080
# 启用调试模式
lsls -d
# 使用自定义 Cookie 和 secToken
lsls -c "your-base64-encoded-cookie" -s "your-sec-token"
# 使用 slsaccesstoken
lsls -t "your-sls-access-token"
lsls -p 8080 -c "your-cookie" -s "your-sectoken" -t "your-token" -d
工具支持以下阿里云环境的自动域名映射:
sls-pre → sls-pre.console.aliyun.comsls-stg → sls-stg.console.aliyun.comsls-prod → sls-prod.console.aliyun.compre-sls → pre-sls.console.aliyun.compre-cmsnext → pre-cmsnext.console.aliyun.compre-stg-cmsnext → pre-stg-cmsnext.console.aliyun.com默认环境:sls.console.aliyun.com
GET /aliyun/config
返回当前配置的 Cookie 和 secToken 信息:
{
"Cookie": "your-cookie-value",
"secToken": "your-sectoken-value"
}
启用调试模式(-d 参数)后,会在控制台输出详细的请求信息:
lsls -d
输出示例:
GET https://sls.console.aliyun.com/api/endpoint 200
POST https://sls-pre.console.aliyun.com/api/data 201
状态码会有不同颜色显示:
-c 参数时,Cookie 值需要进行 Base64 编码~/.local.json 中的 Cookie 值应该是 Base64 编码后的值代理服务器启动失败
请求被拒绝
CORS 错误
lsls --help
本项目遵循相关开源许可证。
FAQs
The npm package lsls receives a total of 4 weekly downloads. As such, lsls popularity was classified as not popular.
We found that lsls demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.