
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
node-http-mock
Advanced tools
A HTTP mock server for node.js
Install it:
npm install node-http-mock -g
And run this command in your termial:
mock -t [api host] -p [local port] -c [config file]
You can use config file instead of command line options:
// mock.config.js
module.exports = {
port: 5000,
verbose: true,
proxy: {
target: 'api host',
changeOrigin: true,
},
mock: {
'/url_a': {},
'/url_b': {},
},
}
Run this command to use the config file:
mock -c # default config file mock.config.js
mock -c my.mock.config.js # customize config file
node-http-mock can construct mock data from real HTTP streams.It identify APIs according to request url, request method and query strings.
[method] [url] ? [query string]
Use -r option to recording these responses as ordinary JSON files in .mock/:
mock -r [directory path]
Press Crtl-C will terminate recording and create index.js tracing the JSON files.After that you can import the index.js into your config file manually:
module.exports = {
// ...
mock: require('./.mock/index.js'),
}
Run this command to see a list of all available options:
mock --help
MIT © BinRui.Guan
FAQs
A HTTP mock server for node.js
The npm package node-http-mock receives a total of 1 weekly downloads. As such, node-http-mock popularity was classified as not popular.
We found that node-http-mock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.