
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
socks5-https-client
Advanced tools
SOCKS v5 HTTPS client implementation in JavaScript for Node.js.
var shttps = require('socks5-https-client');
shttps.get({
hostname: 'encrypted.google.com',
path: '/',
rejectUnauthorized: true // This is the default.
}, function(res) {
res.setEncoding('utf8');
res.on('readable', function() {
console.log(res.read()); // Log response to console.
});
});
Specify the socksHost and socksPort options if your SOCKS server isn't running on localhost:1080. Tor runs its SOCKS server on port 9050 by default, for example.
Username and password authentication is supported with the socksUsername and socksPassword options.
You may also pass a URL as the first argument to get or request, which will be parsed using url.parse.
Works great for making HTTPS requests through Tor.
Make sure a Tor server is running locally and run node example/tor https://check.torproject.org/ to test.
To use with Request, just pass a reference to the Agent constructor..
var Agent = require('socks5-https-client/lib/Agent');
request({
url: 'https://encrypted.google.com/',
strictSSL: true,
agentClass: Agent,
agentOptions: {
socksHost: 'my-tor-proxy-host', // Defaults to 'localhost'.
socksPort: 9050 // Defaults to 1080.
}
}, function(err, res) {
console.log(err || res.body);
});
This client only provides support for making HTTPS requests. See socks5-http-client for an HTTP implementation.
Copyright © 2013 Matthew Caruana Galizia, licensed under an MIT license.
FAQs
SOCKS v5 HTTPS client.
The npm package socks5-https-client receives a total of 11,982 weekly downloads. As such, socks5-https-client popularity was classified as popular.
We found that socks5-https-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.