
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
nJSON is a service to log json data to a redis-instance and display&filter it via a json web tree-view.
https://njson.itsatony.com is a public (and free) nJSON server instance anybody can use to log JS variables/json data to and explore it.
any kind of contributions are super welcome!
a simple server you can run on your own machine. ( alternatively, using https://njson.itsatony.com is free )
(with a http GET) /?id={{id}} uses http://erffun.github.io/jsontree/ to show data stored in the given redis key (id)
(with a http POST or PUT) /?id={{id}} checks for JSON data format and writes that into the redis key id
all submitted data is auto-deleted after 24h
a simple nodejs client that can be used from any nodejs project to log variables to njson
var nJSON = require('njson');
var njson = nJSON.client();
njson(variable, href, callback);
// href is optional and defaults to njson.itsatony.com .
// callback is optional. you will receive the id to access your data.
// check https://github.com/itsatony/nJSON/blob/master/client-example.js for details.
<head>
<script src="https://njson.itsatony.com/lib/nJSON-jquery.js" type="text/javascript"></script>
<script type="text/javascript">
njson(someVariable, someId);
// someId is optional. if you want to supply it, it needs to be 45 characters in length
</script>
</head>
$ npm install njson
$ node example-server
$ node example-client
FAQs
a service to log from nodeJS to a json web tree-view
We found that njson demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.