JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Build a Node web app with user authentication, security, and more in under 10 minutes. Now supports React Hot Loading for super-fast development. :ok_hand:

NodeJS Red-Team Cheat Sheet

npm install could be dangerous

:cop: :punch: RegEx Denial of Service (ReDos) Scanner

:cop: :punch: RegEx Denial of Service (ReDos) Scanner

Code-signing for npm packages

Real time streaming IP/Network security camera on web browser using NodeJS

CSRF mitigation for Next.js

🏄 Framework-agnostic CSRF middleware for modern Node.js

package that checks if your Node.js installation is vulnerable to known security vulnerabilities

Slides/Notes from my talk on Security Best Practices with Node.js https://www.youtube.com/watch?v=qBLgykeA3Mo

E2E Secure Messaging Platform

The goal of this project is to provide additional features on top of the existing npm audit options

:umbrella: Fast and efficient in-memory rate-limit for Node, used to alleviate most common DOS attacks.

A relay, limiter, token and protection system for Nano node RPC & websocket interface

ESLint security plugin for Node.js

Documentation for Essential Node.js Security

[DEPRECATED] A sample web application using Node.js, Express and Angular that is vulnerable to common security vulnerabilities.

This is an npm module for communicating with Blink Home Security System