
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
NHFS — A sleek HTTP file server for the web built with Next.js and HeroUI. (Alpha)
A sleek and sexy file manager built with Next.js and HeroUI.
Originally created as my CS50x final project, now evolving into a long-term side project.
Community pull requests are welcome.
[!WARNING] NHFS Is Still In Development — Features are not well tested and may crash.
npx nhfs
--port, -p — Server port (default: 3000)--dir, -d — Base directory to serve (default: current working directory)--hostname, -h — Hostname (default: localhost)Example:
npx nhfs -p 8080 -d ./files -h 0.0.0.0
[!WARNING] Windows support is not tested yet. If you are on Windows, use WSL.
[!NOTE] Requirements:
- Node.js version
>=18.18.0- Linux 🐧 or macOS 🍎
git clone https://github.com/AliSananS/NHFS.git
cd NHFS
npm install
Edit .env to set the base directory.
If not configured, the current working directory will be served.
npm start
See the Contributing Guide.
[!NOTE] Life’s a little packed for me right now — I’m balancing a busy schedule and a few other projects. I still care about this one and will check in when I can, but updates might be a bit slower. Thanks for your patience and for giving it a try! 💛
This project is licensed under the MIT License. See LICENSE for details.
FAQs
NHFS — A sleek HTTP file server for the web built with Next.js and HeroUI. (Alpha)
The npm package nhfs receives a total of 21 weekly downloads. As such, nhfs popularity was classified as not popular.
We found that nhfs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.