
Research
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.
Like curl, but does way less. Runs anywhere Node.js does.
Usage: uncurl [options...] <url>
Options:
-i, --include Include protocol headers in the output [boolean]
-X, --request Specify request command to use [string] [default: "GET"]
-d, --data HTTP POST data [string]
--data-ascii HTTP POST ASCII data [string]
--data-binary HTTP POST binary data [string]
--data-json HTTP POST JSON data [string]
NOTE: for the long parameters, if you want to read from standard input,
you'll need to invoke the option like so: --data-binary=-.
--data (and --data-ascii) works much like curl – a prefix of @
indicates that the relevant data should be streamed from the file path after
the splat, and passing - as the parameter to --data will read from standard
input until EOF. Data will be sent as Content-Type
application/x-www-form-urlencoded.
--data-binary works a little differently from the curl option of the same
name. It doesn't URL encode the data, but it does set the Content-Type to
application/octet-stream, and sends the data with a binary encoding. It also
allows the use of @ to read files and - for standard input.
--data-json is an option unique to uncurl. If the data isn't streaming
(that is, coming from a file or standard input), uncurl will verify that it's
valid JSON before sending it to the server. It will also set the Content-Type
to application/json and the encoding to UTF-8. It also allows the use of @
to read files and - for standard input.
FAQs
Like curl, but in pure JavaScript.
We found that uncurled demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.