An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

npmjs.org "ssrf" keyword

@stratusagent/egress 0.14.0
The Stratus Agent egress policy: which addresses a tool may reach, enforced on the connection rat...
34 versions - Latest release: about 10 hours ago - 1.86 thousand downloads last month - 4 stars on GitHub - 1 maintainer
@enigmax/utils 0.7.0 πŸ’°
Headless application utilities that render nothing: a short-TTL read cache with in-flight dedupli...
7 versions - Latest release: about 1 month ago - 74 downloads last month - 3 stars on GitHub - 1 maintainer
linkpeek 2.1.7
Fast, safe TypeScript link preview library and URL metadata extractor for Open Graph, Twitter Car...
15 versions - Latest release: about 15 hours ago - 15.4 thousand downloads last month - 17 stars on GitHub - 1 maintainer
@jayyuen66/dsh-scrapling 0.1.5
Scrapling η½‘ι‘΅ζŠ“ε–ζ’δ»ΆοΌˆdshοΌ‰οΌšι™ζ€/ζ΅θ§ˆε™¨ζŠ“ε– + CSS/XPath η»“ζž„εŒ–ζŠ½ε– + 选择器θ‡ͺζ„ˆ + capture_xhr δΈŽδΌšθ―η½‘η»œεŽ†ε² + η™»ε½•ζ€ε­˜ε– + Spider 爬...
14 versions - Latest release: about 17 hours ago - 1.7 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@selvajs/server 1.4.1
Transport-agnostic server building blocks for apps built on the Selva engine (limits, rate limiti...
46 versions - Latest release: 30 days ago - 2.11 thousand downloads last month - 9 stars on GitHub - 1 maintainer
@patchstack/connect 0.5.75
Runtime application security for JavaScript and Node.js: dependency inventory, attack-surface map...
117 versions - Latest release: about 18 hours ago - 7.3 thousand downloads last month - 1 stars on GitHub - 1 maintainer
Top 4.2% on npmjs.org
request-filtering-agent 3.2.1 πŸ’°
An http(s).Agent implementation that block request Private IP address.
16 versions - Latest release: 4 months ago - 2 dependent packages - 417 dependent repositories - 963 thousand downloads last month - 28 stars on GitHub - 1 maintainer
dssrf 1.0.6 πŸ’°
SSRF defense library for Node.js with safe URL validation utilities.
7 versions - Latest release: 5 months ago - 21 thousand downloads last month - 8 stars on GitHub - 1 maintainer
ssrf-agent 1.0.5
prevent SSRF in http(s) request
5 versions - Latest release: almost 5 years ago - 1 dependent package - 1 dependent repositories - 251 downloads last month - 19 stars on GitHub - 1 maintainer
correctover-scan 3.4.2
Correctover Security Scanner β€” CCS audit for MCP configurations AND published JS bundles/npm pack...
31 versions - Latest release: about 23 hours ago - 1.81 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@mpointer/url-guard 0.2.0
SSRF guard for outbound URLs: canonical IP-literal parsing in every encoding, private/metadata/li...
4 versions - Latest release: 1 day ago - 357 downloads last month - 0 stars on GitHub - 1 maintainer
secure-core-js 1.3.0
Security library for JavaScript and TypeScript with authenticated AES, scrypt passwords, phishing...
5 versions - Latest release: 1 day ago - 182 downloads last month - 1 maintainer
@yedoma-labs/tanur-ssrf 1.0.0
SSRF-safe fetch for Node.js: pins the DNS result, validates every resolved IP and every redirect ...
2 versions - Latest release: 1 day ago - 1 maintainer
@memberjunction/network-utils 6.1.6
MemberJunction: Server-side network utilities - SSRF-safe URL validation and a dependency-free HT...
19 versions - Latest release: 13 days ago - 5.92 thousand downloads last month - 33 stars on GitHub - 13 maintainers
@profullstack/scraper-daemon 0.2.2
One updater daemon for every listing site, on BullMQ: periodic jobs, per-item refresh queues and ...
6 versions - Latest release: 1 day ago - 131 downloads last month - 0 stars on GitHub - 2 maintainers
@btravstack/http-client 0.50.0
Policy-bound outbound HTTPS with exact application-approved origins, connection-time destination ...
17 versions - Latest release: 4 days ago - 981 downloads last month - 4 stars on GitHub - 1 maintainer
correctover-mcp-server 2.0.4 deprecated
Legacy MCP security server β€” superseded by correctover-mcp-gateway for Claude Code, Cursor, Cline...
28 versions - Latest release: about 1 month ago - 1.87 thousand downloads last month - 1 stars on GitHub - 1 maintainer
@rail402.dev/safe-fetch 0.4.2
Outbound HTTP for untrusted URLs: SSRF-safe DNS pinning, redirect control, and size and time limits.
5 versions - Latest release: 10 days ago - 772 downloads last month - 0 stars on GitHub - 1 maintainer
@arcanepowered/integrations-sdk 0.3.0
Define third-party API integrations in one file: typed connection fields, auth, operations and an...
4 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
@procedures/http 0.44.0
HTTP as procedures: request, JSON, NDJSON and server-sent events, with a host allowlist that refu...
73 versions - Latest release: 2 days ago - 9.75 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@gusnips/server 0.15.0
The layer under a TypeScript backend: one error shape, one response envelope, one retry rule, one...
64 versions - Latest release: 9 days ago - 5.02 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@portable/ip 0.1.0
Parse, format, compare, and classify IPv4 and IPv6 addresses and CIDR blocks, in any JavaScript r...
3 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
pi-qwen-block-proxy-artifacts 0.1.1
Pi extension that hard-blocks hallucinated Aliyun OSS file-proxy artifact URLs before a network-c...
2 versions - Latest release: 2 days ago - 1 maintainer
@usehenri/webhooks 1.2.0
henri outbound webhooks: endpoints an application registers, signed deliveries and the retries of...
2 versions - Latest release: about 2 months ago - 13 downloads last month - 51 stars on GitHub - 1 maintainer
pi-block-proxy-artifacts 0.1.0
Pi extension that hard-blocks hallucinated Aliyun OSS file-proxy artifact URLs before a network-c...
2 versions - Latest release: 2 days ago - 1 maintainer
dsh-fakeip-fetch 0.5.2
Local HTTP fetch for DSH with opt-in TUN Fake-IP bypass and a first-run self check
2 versions - Latest release: 2 days ago - 1 maintainer
chunk-invariance 0.1.0
Assert that a streaming filter gives the same output however its input is split into chunks.
1 version - Latest release: about 1 month ago - 13 stars on GitHub - 1 maintainer
@guardbee/mcp-a2a-auditor 0.2.2
MCP server that scans Agent2Agent (A2A) protocol implementation code for anti-patterns found in t...
6 versions - Latest release: 8 days ago - 0 downloads last month - 1 stars on GitHub - 1 maintainer
oxlint-plugin-node-security 5.8.0 πŸ’°
The node-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-node-secur...
3 versions - Latest release: 3 days ago - 18 stars on GitHub - 1 maintainer
@iso4/fetch 0.1.1
Hardened FetchHandler for the @iso4/sandbox runtime: DNS pinning, host allowlist, private-IP bloc...
5 versions - Latest release: 17 days ago - 239 downloads last month - 2 stars on GitHub - 1 maintainer
Top 7.2% on npmjs.org
got-ssrf 3.0.0
Protect Got requests from SSRF
15 versions - Latest release: over 2 years ago - 2 dependent packages - 7 dependent repositories - 119 thousand downloads last month - 49 stars on GitHub - 1 maintainer
@proxlane/shared 0.15.0
The Proxlane outcome taxonomy, request shape and SSRF edge guard, shared by the gateway and every...
18 versions - Latest release: about 1 month ago - 885 downloads last month - 4 stars on GitHub - 1 maintainer
@node9/proxy 2.41.3
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are ...
262 versions - Latest release: 4 days ago - 7.83 thousand downloads last month - 219 stars on GitHub - 1 maintainer
@node9/policy-engine 2.41.3
Shared policy evaluation engine for node9 β€” DLP, smart rules, AST shell parsing, shields, loop de...
152 versions - Latest release: 4 days ago - 6.62 thousand downloads last month - 219 stars on GitHub - 1 maintainer
@iflow-mcp/node9-ai-proxy 1.11.3
The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.
1 version - Latest release: 6 months ago - 31 downloads last month - 219 stars on GitHub - 2 maintainers
node9-ai 2.41.3
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are ...
194 versions - Latest release: 4 days ago - 8.34 thousand downloads last month - 219 stars on GitHub - 1 maintainer
@bloklabs/server 1.16.1 πŸ’°
Blok server delivery for ASP.NET Core, npm, and Docker β€” shared C# routes for file uploads and li...
9 versions - Latest release: 23 days ago - 0 downloads last month - 43 stars on GitHub - 1 maintainer
@botmesh/http 0.2.0-alpha.0
Safe outbound HTTP primitives for BotWA providers.
3 versions - Latest release: 8 days ago - 0 downloads last month - 118 stars on GitHub - 1 maintainer
@yadsh/dsh-web-fetch-authenticated 0.7.4
Authenticated, policy-gated WebFetchProvider for the DeepSeek Harness web capability seam (ctx.web)
17 versions - Latest release: 3 days ago - 0 downloads last month - 3 stars on GitHub - 1 maintainer
@naturalatlas/paranoid-request 1.1.1
A paranoid request library
1 version - Latest release: over 8 years ago - 1 dependent package - 1 dependent repositories - 4 downloads last month - 2 stars on GitHub - 2 maintainers
ssrf-lab 0.1.0
Test whether your Node.js fetcher actually blocks SSRF or just got lucky: a local attack range wi...
2 versions - Latest release: 4 days ago - 0 stars on GitHub - 1 maintainer
@braedonsaunders/appkit-egress-proxy 0.2.1
Fail-closed egress chokepoint for agent sandboxes β€” explicit HTTP and CONNECT proxying plus trans...
4 versions - Latest release: about 2 months ago - 59 downloads last month - 5 stars on GitHub - 1 maintainer
eslint-plugin-node-security 5.7.0 πŸ’°
ESLint plugin for Node.js security β€” detects command injection, path traversal, SSRF, zip slip, a...
58 versions - Latest release: 4 days ago - 18 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@agent-mcp-tools/mcp-slim-guard 0.1.0 deprecated
MCP proxy for schema compression, tool access control, SSRF protection, injection detection, rate...
1 version - Latest release: 3 months ago - 80 downloads last month - 186 stars on GitHub - 1 maintainer
@agentskit/net 0.2.4 πŸ’°
Resilient, bounded and SSRF-safe HTTP for the AgentsKit ecosystem: retry with Retry-After, timeou...
7 versions - Latest release: 6 days ago - 3.44 thousand downloads last month - 36 stars on GitHub - 1 maintainer
@stigmer/outbound 3.41.0 deprecated
The rules Stigmer's TypeScript processes dial a user-supplied endpoint by, shared by the control ...
134 versions - Latest release: 30 days ago - 15.8 thousand downloads last month - 8 stars on GitHub - 1 maintainer
@dwk/safe-fetch 1.0.0-beta.2
SSRF-safe outbound fetch and capped body reads. Cross-standard reusable; no Workers runtime depen...
5 versions - Latest release: 7 days ago - 3 stars on GitHub - 1 maintainer
@sms-florin/mcp-ssrf-scan 0.5.0
A static scanner for MCP servers that catches the exact bug class behind most real MCP SSRF repor...
6 versions - Latest release: 8 days ago - 237 downloads last month - 1 maintainer
@bybrave/url-parse2 2.0.1 deprecated πŸ’°
Maintained fork of url-parse β€” small-footprint URL parser with the Unicode hostname SSRF differen...
2 versions - Latest release: 4 months ago - 1 maintainer
tokenizen-net-guard 0.1.0 πŸ’°
The single enforced egress choke-point for the tokenizen trust layer: an IP-validating, IP-pinnin...
2 versions - Latest release: 8 days ago - 0 stars on GitHub - 1 maintainer
@thomasfosterau/effect-web 0.1.0
Framework-neutral web request/response utilities on effect/http: cache-control and security heade...
3 versions - Latest release: 17 days ago - 1 stars on GitHub - 1 maintainer
@bot-wa/http 0.2.0-alpha.0
Safe outbound HTTP primitives for BotWA providers.
2 versions - Latest release: 8 days ago - 118 stars on GitHub - 1 maintainer
server-fetch 1.0.10
SSRF-safe fetch() for server-side use β€” validates IPs, enforces scheme/port, eliminates DNS rebin...
5 versions - Latest release: 6 months ago - 247 downloads last month - 5 stars on GitHub - 1 maintainer
nextguard-firewall 4.3.1
Enterprise-grade L7 web application firewall for Node.js. Zero config β€” 17 attack detectors, beha...
7 versions - Latest release: 9 days ago - 0 downloads last month - 1 maintainer
@advance-labs/net-guard 0.2.3
SSRF-guarded HTTP fetch seam β€” DNS-resolves and rejects private/loopback/link-local/CGNAT/cloud-m...
4 versions - Latest release: 9 days ago - 400 downloads last month - 2 stars on GitHub - 1 maintainer
mcp-internal-hosts 0.2.1 πŸ’°
Is this host only reachable from where you stand? Classifies loopback, link-local and cloud-metad...
4 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
pi-web-engine 0.1.2
πŸ” Native OpenAI Codex Web Search and Secure, Readable Web Fetching for Pi
5 versions - Latest release: about 2 months ago - 94 downloads last month - 0 stars on GitHub - 1 maintainer
host-consensus 0.1.2
Reports whether every URL-parsing convention agrees on the host a URL names.
3 versions - Latest release: about 2 months ago - 39 downloads last month - 0 stars on GitHub - 1 maintainer
@chiranthmoger/fortifyjs 1.1.3
Zero-dependency Web Application Firewall and AI Security Suite for Node.js. One-line protection a...
4 versions - Latest release: about 2 months ago - 394 downloads last month - 1 stars on GitHub - 1 maintainer
@carlosfevernova/mcp-armor 0.1.0
Drop-in proxy for MCP clients β€” lazy-loads tool schemas (60-95% token savings), scans for SSRF an...
1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
search100x 4.0.0
Multi-source web search for LLM grounding β€” works with any model provider
16 versions - Latest release: 2 months ago - 149 downloads last month - 0 stars on GitHub - 1 maintainer
@creait/dsh-web-fetch 0.1.0
Guarded local fetch provider for the DeepSeek Harness web capability seam (ctx.web) β€” the backend...
1 version - Latest release: 2 months ago - 149 downloads last month - 6 stars on GitHub - 1 maintainer
ssrf-guarded-fetch 1.0.0
A fetch wrapper that resolves DNS before connecting, blocks private/loopback/link-local/CGNAT add...
1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@ismail-elkorchi/http-client 0.1.1
Strict streaming HTTP/1.1 and HTTP/2 client with bounded transfers and network safety.
2 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
automa-safe-fetch 0.1.2
An HTTP client for applications that fetch user-supplied URLs, without letting those users reach ...
3 versions - Latest release: about 2 months ago - 335 downloads last month - 0 stars on GitHub - 1 maintainer
dsh-netguard 0.7.0
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at conn...
10 versions - Latest release: about 2 months ago - 1.42 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@amirandap/service-kit 0.1.0
The Node service plumbing every backend in this fleet needs and each one only half had: Express e...
1 version - Latest release: 2 months ago - 1 maintainer
@intentface/latch-net 0.22.1
Network-safety primitives for Latch β€” SSRF guards (private-IP blocklist + DNS-rebinding backstop)...
19 versions - Latest release: 13 days ago - 3.03 thousand downloads last month - 0 stars on GitHub - 4 maintainers
@cefense/mcp 0.1.0 removed
Cefense MCP — prove every handler touching req.* (sqli/idor/xss/ssrf) with exploit→mutate→verify
1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
dsh-plugin-ccs 0.1.0 deprecated
CCS runtime security guard for DeepSeek Harness β€” 7-dimension policy engine that blocks SSRF, cre...
1 version - Latest release: 2 months ago - 167 downloads last month - 1 maintainer
@andreolf/mcpaudit 0.1.2
npm audit for MCP servers β€” grade any MCP server A–F on auth, SSRF, static keys, and prompt-injec...
3 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
safe-fetch-mcp-server 0.4.1
A secure-by-default MCP server for fetching web content: SSRF, DNS-rebinding, and redirect-to-int...
8 versions - Latest release: 10 days ago - 302 downloads last month - 1 stars on GitHub - 1 maintainer
dsh-safe-web-fetch 0.1.0-next.0
SSRF-resistant HTTP(S) fetch provider for DeepSeek Harness
1 version - Latest release: 3 months ago - 352 downloads last month - 0 stars on GitHub - 1 maintainer
sinktrace 0.1.0
Finds what your AI agent's tools can be tricked into doing β€” then proves it by running the exploi...
1 version - Latest release: 3 months ago - 1 maintainer
fetch-untrusted 1.0.0
fetch() for URLs you did not write. Resolves, blocks private IPs, pins the connection, re-checks ...
1 version - Latest release: 3 months ago - 0 stars on GitHub - 1 maintainer
@devslab/ssrf-guard-js 0.7.2 πŸ’°
SSRF protection for JavaScript and TypeScript: URL policy validation, private-network blocking, r...
13 versions - Latest release: 2 months ago - 186 downloads last month - 0 stars on GitHub - 1 maintainer
@yawlabs/fetch-mcp 0.8.5
Fetch MCP server for AI agents: HTTP requests, HTML-to-markdown, reader mode, metadata, links, si...
29 versions - Latest release: 19 days ago - 3.96 thousand downloads last month - 2 stars on GitHub - 1 maintainer
ssrf 1.1.2
This module help's you to prevent ssrf attacks
4 versions - Latest release: 5 months ago - 1 dependent package - 1 dependent repositories - 113 downloads last month - 1 stars on GitHub - 1 maintainer
ssrf-req-filter 1.1.1
Module to prevent SSRF when making requests
9 versions - Latest release: over 2 years ago - 1 dependent package - 2 dependent repositories - 219 thousand downloads last month - 22 stars on GitHub - 1 maintainer
@agnt-gg/nope 0.1.4
NOPE β€” Neutralize Operations Prior to Execution. Security guardrails for AI agents with fail-clos...
5 versions - Latest release: 3 months ago - 863 downloads last month - 1 stars on GitHub - 1 maintainer
commitcourier 0.4.0
Transactional Outbound Webhook delivery for Node.js/TypeScript, backed by your existing PostgreSQL.
3 versions - Latest release: 4 months ago - 0 stars on GitHub - 1 maintainer
@arcis/node 1.7.1
Inside-the-app security middleware for Node.js. Express and NestJS run the full sanitizer pipelin...
20 versions - Latest release: 5 months ago - 286 downloads last month - 9 stars on GitHub - 1 maintainer
@abineshsolairaj/pdf-merge 1.5.0
Utility to merge PDFs from Base64 strings, Buffers, file paths, or URLs, with page selection, doc...
6 versions - Latest release: 4 months ago - 0 stars on GitHub - 1 maintainer
redgun-security 2.2.0
Black-box & white-box security auditor for web applications with HackTricks techniques
10 versions - Latest release: 5 months ago - 1 stars on GitHub - 1 maintainer
neutrx 1.5.0 πŸ’°
Security-first TypeScript HTTP client β€” SSRF protection, circuit breaker, bulkhead, OTel, Zod val...
6 versions - Latest release: 4 months ago - 0 stars on GitHub - 1 maintainer
ips-le-mcp 1.1.0
Extract every IP address, CIDR block and MAC, normalized and classified by scope.
3 versions - Latest release: 22 days ago - 602 downloads last month - 1 stars on GitHub - 1 maintainer
owthorize 0.4.2
Block unsafe AI-agent tool calls before they execute. SQL DDL, SSRF, shell metacharacters, path t...
2 versions - Latest release: 6 months ago - 15 downloads last month - 5 stars on GitHub - 1 maintainer
claustra 1.6.1
Audits Next.js App Router projects for server/client boundary violations and security gaps β€” leak...
11 versions - Latest release: 6 months ago - 479 downloads last month - 0 stars on GitHub - 1 maintainer
cross-connection 0.2.4
Security-first Axios alternative HTTP client for TypeScript, Node.js, and browsers with retries, ...
5 versions - Latest release: 7 months ago - 0 stars on GitHub - 1 maintainer
@awsibnj/bridge 8.0.0
A powerful, secure, and lightning-fast HTTP client for Node.js and browsers. Axios-compatible API...
1 version - Latest release: 6 months ago - 0 stars on GitHub - 1 maintainer
tooleval 0.1.0
npm audit for MCP servers β€” zero-config heuristic testing that discovers tools and runs 21 automa...
1 version - Latest release: 7 months ago - 1 maintainer
@sathyendra/security-checker 1.26.0
Stop npm supply-chain attacks before they execute. Zero-dependency security scanner: malicious pa...
5 versions - Latest release: 6 months ago - 0 stars on GitHub - 1 maintainer
@insitetechjp/dssrf 2.0.0 πŸ’°
SSRF defense library for Node.js with safe URL validation and pinned fetching.
1 version - Latest release: about 1 month ago - 124 downloads last month - 8 stars on GitHub - 1 maintainer
@methodwhite/request 2.88.2-secure.1
Simplified HTTP request client with SSRF protection - Fork de request con correcciones de seguridad.
2 versions - Latest release: 8 months ago - 1 maintainer
@elliotllliu/agentshield 0.4.3 deprecated
Security scanner for AI agent skills, MCP servers, and plugins
7 versions - Latest release: 8 months ago - 653 downloads last month - 15 stars on GitHub - 1 maintainer
nextjs-security-suite 1.0.6
Automated security testing for Next.js. 292 tests across 24 categories - OWASP Top 10, CSRF, CORS...
5 versions - Latest release: 8 months ago - 1 maintainer
next-armor 0.1.0
Drop-in security for Next.js API routes. Rate limiting, bot detection, threat scoring, input vali...
1 version - Latest release: 8 months ago - 1 maintainer
payload-playground 1.5.0
Swiss army knife CLI for pentesters β€” 24 payload generators + encoding, hashing, fuzzing, IP conv...
7 versions - Latest release: 8 months ago - 82 downloads last month - 1 maintainer
@caido-community/quickssrf 1.0.4
Specification for the QuickSSRF plugin
7 versions - Latest release: 15 days ago - 608 downloads last month - 54 stars on GitHub - 6 maintainers
sanitize-url-plus 1.0.2
A comprehensive, zero-dependency URL sanitization library covering all known URL-based attack vec...
3 versions - Latest release: 8 months ago - 0 stars on GitHub - 1 maintainer