@miraj181/ipingyou 2.0.1 → 2.0.4

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 skmirajulislam
+Copyright (c) 2026 Sk Mirajul Islam
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -74,7 +74,13 @@ graph LR
 
 ---
 
-## 🛠 Prerequisites
+## 🛡️ Security Scanner Disclaimer
+
+Because **iPingYou** is a powerful remote administration tool with features like background daemonization (via PM2), secure shell execution (`execa`), and anti-forensics capabilities (`panic` mode), automated security scanners (such as Socket.dev or enterprise EDRs) may flag this package as a **potential risk** or **malware-like**. 
+
+These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Network access") are **expected behavior** for a peer-to-peer tunneling utility. The source code is entirely open-source, heavily documented, and uses zero-knowledge encryption to ensure your data is safe.
+
+---
 
 | Tool | Required | Installation Guide |
 |------|----------|--------------------|

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.0.1",
+  "version": "2.0.4",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {
@@ -45,9 +45,6 @@
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
     "execa": "^9.5.2",
-    "express": "^5.2.1",
-    "express-rate-limit": "^8.5.2",
-    "helmet": "^8.1.0",
     "inquirer": "^12.3.2",
     "nanoid": "^5.0.9",
     "open": "^11.0.0",

package/src/cli.js

@@ -26,11 +26,7 @@ import { detectOS, checkDependencies } from './lib/platform.js';
 import { installShutdownHandlers, executePanicMode } from './lib/cleanup.js';
 import { startHostMode } from './modes/host.js';
 import { startClientMode } from './modes/client.js';
-import { execa } from 'execa';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
 
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
 // ─── ASCII Banner ────────────────────────────────────────────
 function showBanner() {

package/src/modes/client.js

@@ -21,7 +21,7 @@ import os from 'node:os';
 import crypto from 'node:crypto';
 import { decrypt, encrypt } from '../lib/crypto.js';
 import { trackPID, untrackPID, addCleanupHook } from '../lib/cleanup.js';
-import { createSpinner, sshSpinner, networkSpinner, fileTransferSpinner, showConnectionTrace, animatedSteps, simulateTransferProgress } from '../lib/animations.js';
+import { createSpinner, sshSpinner, networkSpinner, fileTransferSpinner, showConnectionTrace, simulateTransferProgress } from '../lib/animations.js';
 import { getConfig, saveAlias } from '../lib/config.js';
 import open from 'open';
 
@@ -701,7 +701,7 @@ async function performReverseForward(username, hostname, privateKeyPath) {
   const spinner = createSpinner(`Forwarding Host:${remotePort} ➔ Localhost:${localPort}...`, networkSpinner).start();
 
   try {
-    const child = execa('ssh', sshArgs, { stdio: 'pipe' });
+    const child = execa('ssh', sshArgs, { stdio: 'inherit' });
     trackPID(child.pid);
     spinner.succeed(`Reverse tunnel active! Host can access your app at ${chalk.bold.green('localhost:' + remotePort)}`);
     console.log(chalk.dim('  Press Ctrl+C to terminate the reverse tunnel.'));

package/src/modes/host.js

@@ -24,7 +24,6 @@ import { trackPID, untrackPID, setRevokeOnExit, addCleanupHook } from '../lib/cl
 import { detectOS } from '../lib/platform.js';
 import { createSpinner, cryptoSpinner, tunnelSpinner, networkSpinner, typeText } from '../lib/animations.js';
 import { startChatServer, openLocalChatUI } from '../lib/chat.js';
-import open from 'open';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 let BROKER_URL = process.env.BROKER_URL || 'https://ipingyou.onrender.com';
@@ -157,8 +156,7 @@ async function spawnTunnelSupervised(targetUrl, onUrlGenerated) {
 
 // ─── Ephemeral SSH Key Management ────────────────────────────
 async function generateEphemeralKey() {
-  const osInfo = detectOS();
-  const tmpDir = osInfo.isWindows ? process.env.TEMP : '/tmp';
+  const tmpDir = os.tmpdir();
   const keyPath = path.join(tmpDir, `ipingyou_${Date.now()}`);
   
   await execa('ssh-keygen', ['-t', 'ed25519', '-C', 'ipingyou-ephemeral', '-f', keyPath, '-N', '']);