Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
webtunnel-next
Advanced tools
webtunnel exposes your localhost to the world for easy testing and sharing! No need to mess with DNS or deploy just to have others test out your changes.
Great for working with browser testing tools like browserling or external api callback services like twilio which require a public url for callbacks.
npx webtunnel-next --port 8000
npm install -g webtunnel-next
yarn add webtunnel-next
When webtunnel is installed globally, just use the wt
command to start the tunnel.
wt --port 8000
Thats it! It will connect to the tunnel server, setup the tunnel, and tell you what url to use for your testing. This url will remain active for the duration of your session; so feel free to share it with others for happy fun time!
You can restart your local server all you want, wt
is smart enough to detect this and reconnect once it is back.
Below are some common arguments. See wt --help
for additional arguments
--subdomain
request a named subdomain on the webtunnel server (default is random characters)--local-host
proxy to a hostname other than localhostYou may also specify arguments via env variables. E.x.
PORT=3000 wt
The webtunnel client is also usable through an API (for test integration, automation, etc)
Creates a new webtunnel to the specified local port
. Will return a Promise that resolves once you have been assigned a public webtunnel url. options
can be used to request a specific subdomain
. A callback
function can be passed, in which case it won't return a Promise. This exists for backwards compatibility with the old Node-style callback API. You may also pass a single options object with port
as a property.
const webtunnel = require('webtunnel-next');
(async () => {
const tunnel = await webtunnel({ port: 3000 });
// the assigned public url for your tunnel
// i.e. https://abcdefgjhij.webtunnel.me
tunnel.url;
tunnel.on('close', () => {
// tunnels are closed
});
})();
port
(number) [required] The local port number to expose through webtunnel.subdomain
(string) Request a specific subdomain on the proxy server. Note You may not actually receive this name depending on availability.host
(string) URL for the upstream proxy server. Defaults to https://webtunnel.me
.local_host
(string) Proxy to this hostname instead of localhost
. This will also cause the Host
header to be re-written to this value in proxied requests.local_https
(boolean) Enable tunneling to local HTTPS server.local_cert
(string) Path to certificate PEM file for local HTTPS server.local_key
(string) Path to certificate key file for local HTTPS server.local_ca
(string) Path to certificate authority file for self-signed certificates.allow_invalid_cert
(boolean) Disable certificate checks for your local HTTPS server (ignore cert/key/ca options).Refer to tls.createSecureContext for details on the certificate options.
The tunnel
instance returned to your callback emits the following events
event | args | description |
---|---|---|
request | info | fires when a request is processed by the tunnel, contains method and path fields |
error | err | fires when an error happens on the tunnel |
close | fires when the tunnel has closed |
The tunnel
instance has the following methods
method | args | description |
---|---|---|
close | close the tunnel |
See /webtunnel-server for details on the server that powers webtunnel.
MIT
FAQs
Expose localhost to the world
The npm package webtunnel-next receives a total of 0 weekly downloads. As such, webtunnel-next popularity was classified as not popular.
We found that webtunnel-next demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.