Limit the number of directives allowed in a GraphQL query.

Limit the number of aliases allowed in a GraphQL query.

No alias directive for graphql mutation and query types. It can limit the amount of alias fields that can be used for queries and mutations. Preventing batch attacks.

Limit the number of tokens allowed in a GraphQL document.

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

WARNING: CTF LAB PACKAGE — DO NOT USE IN PRODUCTION. Simulates a malicious transitive dependency that exfiltrates credentials via postinstall.

Run AppleScript and get the result

MIDI-like instruments from webaudio

Create a security plugin for node.js

Attack Logger & Awareness Display for BonkLM

An graphical interactive in-browser GraphQL IDE.

Third project of Hexlet

React hook to dynamically load an external script and know when its loaded

Simple representation of MITRE ATT&CK data

This package helps to filter the input text that is malicious and intended to attack the server.

A monkey testing library written in JavaScript, for Node.js and the browser. Use it to check the robustness of web applications by unleashing a horde of undisciplined gremlins.

Pure-JS CRC-32

Runtime type checking for React props and similar objects.

Educational demo: a deliberately vulnerable npm package showing how GitHub Actions cache poisoning can produce a malicious release without stealing any credential. Do NOT use in production.

pure-JS library to handle codepages