Like execa but prevents binary planting attacks on Windows

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code

Constant-time comparison algorithm to prevent timing attacks.

Express middleware to protect against HTTP Parameter Pollution attacks

ESLint plugin to detect and stop Trojan Source attacks

Fluid Attacks core components library

Node.js atomic and non-atomic counters, rate limiting tools, protection from DoS and brute-force attacks at scale

Hardens your Vendure GraphQL APIs against attacks.

A CSS sanitizer to prevent XSS attacks

Middleware for validating host headers in requests to protect against DNS rebinding attacks.

A middleware for AdonisJS to keep web applications secure from common web attacks

Validate and sanitize regular expressions to prevent ReDoS attacks

Rate limiting for hapi/hapi.js to prevent brute-force attacks

Zen by Aikido is an embedded Application Firewall that autonomously protects Node.js apps against common and critical attacks, provides rate limiting, detects malicious traffic (including bots), and more.

Escape functions for LDAP filters and distinguished names to prevent LDAP injection attacks.

A simple but powerful content-filter. Also provides protection against NoSQL (like MongoDB) injection attacks on Node.js

WorldWideView plugin covering cyber attacks features.

A CLI and library which tests helps score how vulnerable a regex pattern is to ReDoS attacks. Supported in the browser, Node and Deno.

Node.js middleware to validate Host and Referer headers in HTTP requests and protect against DNS rebinding attacks.

Express middleware for mitigating brute-force attacks