RustCrypto: Argon2 binding for Node.js

Comprehensive security guards for LLM-powered and agentic AI applications - 35 guards covering OWASP Top 10 for LLMs 2025, Agentic Applications 2026, and MCP Security. All guards accessible via unified TrustGuard facade. Features prompt injection (PAP/per

Timing safe string compare using double HMAC

Normalize a URL

Zen by Aikido is an embedded Application Firewall that autonomously protects Node.js apps against common and critical attacks, provides rate limiting, detects malicious traffic (including bots), and more.

Module to prevent SSRF when making requests

Optimized bcrypt in plain JavaScript with zero dependencies, with TypeScript support. Compatible to 'bcrypt'.

Like execa but prevents binary planting attacks on Windows

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code

Wraps Array.sort to provide shortcuts to make sorting arrays that tiny bit less verbose

Fluid Attacks core components library

Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.

a glob matcher in javascript

Brace expansion as known from sh/bash

ESLint plugin to detect and stop Trojan Source attacks

Arcjet runtime security SDK — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF for JavaScript and TypeScript apps

Bun security scanner for SocketDev

bcrypt written in typescript

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Constant-time comparison algorithm to prevent timing attacks.