Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
strong-tunnel
Advanced tools
Semi-transparent wrapper for arbitrary network connections over ssh2
Easy tunnelling over ssh2.
There is nothing to configure, but some environment variables are used to set defaults if no options are given.
var st = require('strong-tunnel');
st(someUrl, sshOpts, function(err, url) {
// if someUrl was plain http, url will be someUrl
// if someUrl was http+ssh://, url points to a local ephemeral tunnel
// sshOpts is optional with defaults described below.
http.get(url, onResponse);
});
Your current local username is assumed to be the username used for ssh. To
override this you can set the LOGNAME
environment variable to the desired
username before the tunnel URL is created.
To keep the API simple, it is assumed that an ssh agent is already running,
that the path to its domain socket is in the SSH_AUTH_SOCK
environment
variable, and that an appropriate private key has been loaded into that agent.
This is usually done for you in modern *nix environments as part of your login shell/session. See ssh-agent(1) for more information about ssh agents.
var fmt = require('util').format;
var http = require('http');
var st = require('strong-tunnel');
var server = http.createServer(function(req, res) {
res.end(JSON.stringify(req.headers));
});
var sshOpts = {
host: '127.0.0.1',
};
server.listen(3030, function() {
var direct = 'http://127.0.0.1:3030/';
var tunneled = 'http+ssh://127.0.0.1:3030/';
// Standard request using URL string
http.get(direct, resLog('%s using %s:', direct, direct));
// URL is only modified if a tunnelling URL was given
st(direct, function(err, url) {
if (err) throw err;
// url == direct, unmodified
http.get(url, resLog('%s using %s:', direct, url));
});
// optional second argument containing ssh config
st(tunneled, sshOpts, function(err, url) {
if (err) throw err;
// url != tunneled, is modified
http.get(url, resLog('%s using %s:', tunneled, url));
});
server.unref();
});
function resLog(prefix) {
prefix = fmt.apply(null, arguments);
return function onResponse(res) {
res.on('data', function(d) {
console.log('%s -> %s', prefix, d);
});
};
}
FAQs
Semi-transparent wrapper for arbitrary network connections over ssh2
The npm package strong-tunnel receives a total of 119 weekly downloads. As such, strong-tunnel popularity was classified as not popular.
We found that strong-tunnel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.