
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Milton is a publish subscribe client and server for node.js based on the scuttlebutt event emitter. Clients can recieve new events from any other connected client. Install globally and run 'milton' to launch the milton server, clients can connect to the server to emit and recieve events.
Launch the server manually and replicate with remote process' to create a mesh network.
npm install milton -g
milton
milton -p 9999 --replicate 192.168.0.1:8000
# dont use spaces if passing an array
milton -p 9998 -r ['192.168.0.1:8000','127.0.0.1:9999']
var milton = require('milton/client');
var client = milton({ port: 8000 });
var event = {
demo: true
};
process.nextTick(function () {
client.emit('demo', event);
});
client.on('demo', function (data) {
console.log('[recieved] ', data);
});
var pull = require('pull-stream');
var sink = require('milton/pull/sink')();
pull(
pull.values([ { demo: true } ]),
sink('demo_channel')
)
var pull = require('pull-stream');
var source = require('milton/pull/source')();
pull(
source('demo_channel'),
pull.log()
)
Manually create servers and replicate with remote processes to create a peer to peer mesh.
var server = require('milton/server')();
// create a milton server manually
// and replicate with a remote milton server...
//
server.start(8000, function () {
server.replicate('192.168.0.100', 9000);
});
FAQs
pub/sub server and client powered by scuttlebutt
We found that milton demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.