Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
strong-tunnel
Advanced tools
Easy tunnelling over ssh2.
There is nothing to configure, but some environment variables are required.
var st = require('strong-tunnel');
st(someUrl, function(err, url) {
// if someUrl was plain http, url will be someUrl
// if someUrl was http+ssh://, url points to a local ephemeral tunnel
http.get(url, onResponse);
});
Your current local username is assumed to be the username used for ssh. To
override this you can set the LOGNAME
environment variable to the desired
username before the tunnel URL is created.
To keep the API simple, it is assumed that an ssh agent is already running,
that the path to its domain socket is in the SSH_AUTH_SOCK
environment
variable, and that an appropriate private key has been loaded into that agent.
This is usually done for you in modern *nix environments as part of your login shell/session. See ssh-agent(1) for more information about ssh agents.
var fmt = require('util').format;
var http = require('http');
var st = require('strong-tunnel');
var server = http.createServer(function(req, res) {
res.end(JSON.stringify(req.headers));
});
server.listen(3030, function() {
var direct = 'http://127.0.0.1:3030/';
var tunneled = 'http+ssh://127.0.0.1:3030/';
// Standard request using URL string
http.get(direct, resLog('%s using %s:', direct, direct));
// URL is only modified if a tunnelling URL was given
st(direct, function(err, url) {
// url == direct, unmodified
http.get(url, resLog('%s using %s:', direct, url));
});
st(tunneled, function(err, url) {
// url != tunneled, is modified
http.get(url, resLog('%s using %s:', tunneled, url));
});
server.unref();
});
function resLog(prefix) {
prefix = fmt.apply(null, arguments);
return function onResponse(res) {
res.on('data', function(d) {
console.log('%s -> %s', prefix, d);
});
};
}
FAQs
Semi-transparent wrapper for arbitrary network connections over ssh2
The npm package strong-tunnel receives a total of 95 weekly downloads. As such, strong-tunnel popularity was classified as not popular.
We found that strong-tunnel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.