
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Mobile-first and WebUI minimalist seedbox server to download torrent (magnets only). Based on ❤ webtorrent. (no other BitTorrent client required)
| Download Magnet | Add Folder |
|---|---|
![]() | ![]() |
npm install -g torhero
torhero
By default, the port is 8000. You can change that with
torhero -p 1234
You can keep the server running by using PM2
# Stop your torhero server first (Ctrl+C)
npm install pm2 -g
pm2 start torhero
Add a folder
# Examples
C:/Users/pi/torrents # For Windows
/home/pi/torrents # For Linux

Start download
You can use a rudimentary password protection. To encrypt your password use any bcrypt encryption tool online. Then, to access to the server, the url is http://torhero_url/?pwd=mypassword
torhero -auth 'bcrypt-encrypted-password'
#For example
torhero -auth '$2a$12$rdJX3qYiA6L9epeoZ8K6SundSiC8wCjP45nahMsPWj6YcyHDt8S2m' #Password here is "abcdef"
#http://localhost:8000/?pwd=abcdef
You can remove the torrent during it's downloading.
Important: It will NOT remove the files
You can provide a json file containing folders' names and path by using this command. By default, a folders.json file is created inside the script folder.
torhero -folders path/to/folders.json
For example, inside folders.json
{
"Torrents":"/home/pi/torrents"
}
Important: you should have read/write access to this file
You can set TorHero as your default handler for magnet: links. To do so, just click on the gear on top to open the Config dialog.
Important: your torhero server must run on local or https server.
You can start torhero as a https server. You only need to provide an SSL key and certificate. You can use mkcert to create those files. As mentionned, it will allow you to open magnet: links with torhero.
torhero -s -k path/to/key -c path/to/certificate
FAQs
Mobile and WebUI minimalist seedbox server based on webtorrent
We found that torhero demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.